Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

1ec04dd865...31.pdf

windows7-x64

1

1ec04dd865...31.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 22:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1ec04dd865123b08e24bc55731193f31.pdf

  • Size

    86KB

  • MD5

    1ec04dd865123b08e24bc55731193f31

  • SHA1

    5177cba91328e6ce8c7d1e0c57990c14aa976797

  • SHA256

    8e1508e7f6e785da0394e6cf9ef5180f9a5df9766649db1be46c9f38669457f1

  • SHA512

    735a2f9fd10bf3375a1fb6f48d70fdf9325973c23ccc95bbfa698830c6b6313e8afc8a6d54621dc70c5b29eafe1d983fdc52885f249d4013d4d136dd4dd7b4d2

  • SSDEEP

    1536:0O4i5fPG3l2y5uEHGl4ZyoEg5JQblfDS//mYamtW6vq4dJT8I6WspORGX3:L5fPG12uGWmqUg/mY7dT8uR8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ec04dd865123b08e24bc55731193f31.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    28becd10e110355bea0d7ab188722cd3

    SHA1

    adfc28eccee26863255b98b995ebea4328a69fd4

    SHA256

    73368173eb170ad975e8f410e712d84a09465a99efb30dd4f481f23a176bae6a

    SHA512

    9ad2fbc4b7241f7d7ec90c57783f9c453b958640cbd0edb2b9b1905cf9029f9ba2a266049510764ab4e2706c23f167765d55da7e47311e924cf03f2373aa5d6d

    Download Submit