Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 00:10

General

  • Target

    081438c9113440dfdc6d4ff22f443572.pdf

  • Size

    88KB

  • MD5

    081438c9113440dfdc6d4ff22f443572

  • SHA1

    922dee463bf862a7e120f43d502088783025b343

  • SHA256

    7d51eb25853b0c7121b89dc9410d9193a81408740880e888792986675efe37a8

  • SHA512

    5de3626a6d0a978a3a01428cab7abb1f13d3c14cb8088c5582d371702713ceddf9a5087e9e072b0b469a279fc652e3e7b18a1cc2db6fb507e7ab59f323b85a9c

  • SSDEEP

    1536:mE50uLxdbfYGUzpvlruA85UW1aLkbp1EaUyzjymWypOlWWxEDfpbwEwrtaq/z4D:P0sbvABW1U84ezmHlDEDfpQrta+o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\081438c9113440dfdc6d4ff22f443572.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    583a38f0a7c42e3b338a9b7c4d5707e0

    SHA1

    c72dca94bc27b1710fe1d04c71b06a737ee107a8

    SHA256

    fa12bcc01d3e95d9c936926652e33a8f635b1a7ff7052bdb34edbe0418a2b54c

    SHA512

    f7fe939b8d376d958091e23b4cde11370b09ec25c9eb01e448f1cce566c4289809bd4b393778cf6e41cf6cdfa229ba36950d346c4cd3c509cab30b8e3bc1603e