Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 21:07

General

  • Target

    040bf7c6287c97de32440d4dbbec13cd.pdf

  • Size

    102KB

  • MD5

    040bf7c6287c97de32440d4dbbec13cd

  • SHA1

    9fb355756ca77467fcb3d2d1e6f96055bcd43edd

  • SHA256

    19c14eb81717a40c78370146c59a877eb6102584c66c4679c27a6da2070a191e

  • SHA512

    ad4a5811e10e859ec8cdc09235b1e4fe830e39665dd80921f68037e8695568e02fda913fba41a9360ea7e047cbaf4917c1d7aed6a3ab8596bc24e4c8f920214c

  • SSDEEP

    1536:wufz3qHCKKQ90WGcO+KctGzPGxDbR8eC/Oqz8WGpOKj/kcbtIrWnHckosgdj:N7KHWMOCAbOfR8eC/hKj9pIUHesG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\040bf7c6287c97de32440d4dbbec13cd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    af81a4744e7bdb693ea1baab79007eef

    SHA1

    6fdd3113e3448b45d6561dc20365fba784a2d91a

    SHA256

    cf3fa679dfe7517b763412a4d13083baca977fbc13a4af0c8c83e8af73d67e39

    SHA512

    876758d50a2ed941676b398946e8f93724f91986968de32c252cb242bab18a7b27e074d133132386bbc649aa96c087dc14e2edd8d51470283ce2bebf9467d8ab