Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 01:29 UTC

General

  • Target

    0a176ab5f3a781a1a26c2ecc861fe0bd.pdf

  • Size

    87KB

  • MD5

    0a176ab5f3a781a1a26c2ecc861fe0bd

  • SHA1

    30346aaf423c7febb2fc3d35fedb1f70d9b6b270

  • SHA256

    818db036e2372dc168a46c7503f9cd5349468660d4a5046408f299bbe655ccfb

  • SHA512

    ade8329029bbd200c3c1dd53b196322de3bcc5b90acb4d3256af68691b2a897d89ef198e97a266698206aae0f9040f0f2562c798dd4a46b2ca8200e5e03a51d5

  • SSDEEP

    1536:Jh/5pb0TCZ5Y1TlPqzqb4pRBWhAHuOugtfQ4Dd7pgDWPF5OWapOtQxsgubYUF6:Tr4TCZ5Y1pi1LUhjOrNQ4p7K45TtQqnu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a176ab5f3a781a1a26c2ecc861fe0bd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c582afdfac216e2ecb1d869114b1db9f

    SHA1

    36a4c371961b90c625368a7426d7a2540567631b

    SHA256

    385a67d2d85794671dc4a0ef205324591a22382ca3dcfb5e3bc759e6b76ea647

    SHA512

    6904d018bce99955b9b818214169b5db59c7f1498f0324b4eb03e90e14d6e3a68f4bce73bbaa6fc39d474503dd318774d656890b66f2c14d8f6ef7bc35a13bbd

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.