Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:19

General

  • Target

    02e1f9baee380e589cf671966d7051e0.pdf

  • Size

    85KB

  • MD5

    02e1f9baee380e589cf671966d7051e0

  • SHA1

    15a1623ef8628969e9a493a83f9a75eaa168c6db

  • SHA256

    700a2a2264f2ccbd48b4bffc40c434bfd1ff13d2cc0145f2512d75b93d389d19

  • SHA512

    c898ef2639636bea054c1e357950a5f6e084d8ba475a2d6f2289b1411bd82275c7c05b09495900dbff1d14946dca2fc759ca6cabe8c39ff3ff7902ae61e5dcc8

  • SSDEEP

    1536:JMPyM89fQfsW3/8LePG2sgLV4EuSVJlMsh6YWu3Feyr3faBqXwj84faWUpO7djn:YyNfQfsW3/8LPdgLx7zzh6+TrPeqT4fH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\02e1f9baee380e589cf671966d7051e0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b0ff139dcb314075dc878f792b595086

    SHA1

    80d5b0a9404b4692b7f815ead26e18aed054ff59

    SHA256

    f03a76cc601cd34f955790ffa77e39efa4a108635a255f4e6df0eff46352f7c3

    SHA512

    01af752d637d4bdb99301794e9b445e11f510a99adee0b3d1f268edd8bacf91d2b8c7409b0320c7c83065c755d7744d75200006adfe3c6df9d214eca67ebf5e5