Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    216s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:45

General

  • Target

    00d8eef73960c9a5fc126f7be6a58fb5.pdf

  • Size

    76KB

  • MD5

    00d8eef73960c9a5fc126f7be6a58fb5

  • SHA1

    43b27f146d6d01a312e1744b6fb208d513116afd

  • SHA256

    5be6c0f928a1fc6e4a6c7b24e9862209797fc9974b381ca3e4a1d76685c57c08

  • SHA512

    f3ceb90f938ce6a8aa90fe9b30b0d0cbacc1b27a3b0be568c02d4c3f6dfda6116bad1132c06e3c3e9aef6579a62f3603a559217f619abf64ef9ded06b494fcf6

  • SSDEEP

    1536:VGFyGmt1A5tyJy+9wLk2zS+cnNq+3SSAYWVTs46wCXYqWOpOSZWRTpoZ3kDoz3W+:gFy/A5tyJDSzVcwsAYWYBXY7Sgdk/zG+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00d8eef73960c9a5fc126f7be6a58fb5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    627c62f0f9afed65f215fe152f80c681

    SHA1

    5f0770c5907ad7c8afb6a718bafe8a49e7a5a940

    SHA256

    d7a85d0d7f5c862a74182146b3c1245113c6b92461349ccdb3961d8a2d409870

    SHA512

    80d6e5df87c4df6891dc5a4859f168c7f596ea352b2b8ced96f6e44f8afadad5636b6d6495047782a8e065332abbd2f7387aede9366fe64c1f1023ad458491c4