Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

1e92108e2b...15.pdf

windows7-x64

1

1e92108e2b...15.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 22:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1e92108e2be7caf24d18f14590fda115.pdf

  • Size

    87KB

  • MD5

    1e92108e2be7caf24d18f14590fda115

  • SHA1

    1ce1ec2f4111e7752b11a1c5fb5e82ced6c3a349

  • SHA256

    a6769fc29544832d9f9587e9130a5fb74ace6ae9a96bdaea2973e3b3d130a784

  • SHA512

    c1579716bdff1ff8fcdaba1bc8ae90cae3ab58343cea01e3f0478086c3ec601a5b0314ab9bd887e93bec93feaf7655c7b67d0034a76ec7305ae07c837eccb740

  • SSDEEP

    1536:VElIglqVgZAGcmPwqDDGuCid8up7ODfLtwaN4+WagLjc3LMVhPVvWQWQpOC2sb:0MVgZy1YC+8uwDTJmoUjKS7vW/CJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1e92108e2be7caf24d18f14590fda115.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    856e84777dd31a481713afd8c3d06cf5

    SHA1

    18b57f7b9791d6d1cc60f220006faf5db5583661

    SHA256

    84edf2e07c1c3716acd0124a83947faed240bebe08043e487be798b595980f3a

    SHA512

    21146b403bc45dcf40c9badeba51ccceeee7c667a8b48fbe3d233f05dd87732aa86be0703df9bb18c591e33793c7bc77ffddd8df9f472c2898a57cfbee405933

    Download Submit