Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 00:29

General

  • Target

    089c40e34aaaf3061f045b3618025089.pdf

  • Size

    99KB

  • MD5

    089c40e34aaaf3061f045b3618025089

  • SHA1

    3c8e9f567adab20bb47ea311c7e421f20cb37c60

  • SHA256

    85121a8050d5f5357d68dec169807b5dd3313dd620f1ca648015878b7442638d

  • SHA512

    a04f60be35df91866fa0942a128658feb333faef4d455230e19b63646988295906790c535aa89b6f09afac66af193ceb42d50555dc4531a04db3da91e8f1424e

  • SSDEEP

    1536:M6kZ65df1t7UI6tYyuPGrN3iRNtOL9zSrlZj/pZBwAExFozHwonGgrBNa4WBcbJ/:VkUPVby/rNS3m9zSrLpR1rBNNN0D5QRf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\089c40e34aaaf3061f045b3618025089.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b57b0f9121974476deebcdf3d465fc24

    SHA1

    037759de32c894b66546d425bbb9e6bd5fce284b

    SHA256

    39ae59cef0ef80a0e4df9a9a83c4a9908a79e5c6f887445a026abb5ffd0a222a

    SHA512

    c587229847fd576a802545d126c0312abdca8d029f6e919c19f2a2ec8fb5656993a8e590eb6742f140c3fead98a579755fcc59838da68beb92a529bc87403e43