Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 19:04

General

  • Target

    012e11ee70ba0a193dd4a8f06e369f7b.pdf

  • Size

    74KB

  • MD5

    012e11ee70ba0a193dd4a8f06e369f7b

  • SHA1

    558e4070bc90556a8863a7070b4cae2effb84363

  • SHA256

    c515c0f01860fedadac5c0aa479db63797f6bc75a443509cf850f8ecabc671c7

  • SHA512

    f4e2916b10ac760acaf3bee3ce5233590742aa5127e49672d3a7bbf7fe7783aa77121acbc9a1d4b4ca1b117270c1ccb712be86428afac3cbc0167ff4143ed495

  • SSDEEP

    1536:5Ak9hGg7m+kfcjJGNh3jAtcFqw+nYUDLeA25BGbQbL3auxb9WHYJEWiO5wMq0SXZ:JVRakeqw+YUfeT2Qf3a6YHYJ+Xd0C

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\012e11ee70ba0a193dd4a8f06e369f7b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    601d60c2da223b913896b6d42caf7821

    SHA1

    782571f9f181c3f4713cef0af578fb89362b3a46

    SHA256

    26064201108b63ab3e5c5e134aa19ffd6e974185ffef24c28757787b4990cf83

    SHA512

    c5ed6db8d4caa475acc892592ba618ec120e57104d508f6358fbde94dd4d63aa78ddff45c1f48e6ebb16475254da35aa66f7e2fa3cda29ba11563e9fa48323d1