Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    207s
  • max time network
    43s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:52

General

  • Target

    00f983bce765771b7d15835b2c692752.pdf

  • Size

    47KB

  • MD5

    00f983bce765771b7d15835b2c692752

  • SHA1

    099ef225a73a8a825ed2e6804036b01f80943223

  • SHA256

    fd5ae1e1d0280b6be11636ee40f3ea93cdeb29c1030ae8131715b9b42d334b03

  • SHA512

    46aebd25ddbbb243ce4a93d1bc7878940672dee177e3d08d7269afea2ea2af925491517d4b1cd5a461547e1fe30f602c535fa5d72d072111dbbea8b7d03aaf8c

  • SSDEEP

    768:pW4rU7uwOAqdJ84sozSTzq6wpWGS0It/06KTwn5wHjWNyxHykQ9DqXxQ:YiVPBsozhHQ50eXKMn5wKkxH+sBQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00f983bce765771b7d15835b2c692752.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    af9f4f8b94413c8a37261dcecefcc24b

    SHA1

    5abef40aafb75cc00bf280f337dbd91ca02f954d

    SHA256

    65249ef1597f3154ae28eec73fcae5b64a0e3cedf0757f0e3acce59734028964

    SHA512

    ee43e79d1a857f8803cfbbe6280b0094ff472c27caa751055cc6d2add85bab874dd1541ae9494f633c86f9f69dc5bf6549da401b92ec73acc5c8b81e01e4fc2b