Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

01fb2cd3b6...a9.pdf

windows7-x64

1

01fb2cd3b6...a9.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 19:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    01fb2cd3b6355fb2f527f8782bfdfea9.pdf

  • Size

    76KB

  • MD5

    01fb2cd3b6355fb2f527f8782bfdfea9

  • SHA1

    eeee046d206ef6c054ae228db0231836e1292db4

  • SHA256

    1136bebb4dae05aaf20337868916abe05821232a96f52bf3644e2e567737d1e9

  • SHA512

    81060de455ff6bdda950daf476a5bce3be1935369a9caa9cd66b1e95786dfdf256cb3a986fab7379a888237bda5da696400b7d6b9df31d45a1ebba69ea56e0be

  • SSDEEP

    1536:93eRaSm/dwo12RTOiNcdcoOBJtbRH3sZXeWGMaGyjg8bOHWOpOaZN85N:peAJ12NOVcoOBJaeMNYaZw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\01fb2cd3b6355fb2f527f8782bfdfea9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    792a0610614a2237cf620a56fa5f3321

    SHA1

    64ff2d9949521b3935ea4aac0b34f41d875bef40

    SHA256

    a12fd55626b95878fa83afb89430759fba4458807e30c5768c2298affcc74b29

    SHA512

    3c81540e396ed9e69e982d834e2d6a46371f5cc08a02711764819e43fe7f869449d355eeff1c84b9477e545b84e7a6e61e3a391876454094c39236b71e1a3399

    Download Submit