Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 02:42

General

  • Target

    0c09b74d90bdadea0ad093e6fade663d.pdf

  • Size

    90KB

  • MD5

    0c09b74d90bdadea0ad093e6fade663d

  • SHA1

    ef658327c8ea614b52248ba046529ae8d2a4e5a6

  • SHA256

    a00c20aad0ef607facd00adb4fa435c1b71eba5ec0db922f9eca7418ecaac17b

  • SHA512

    038f3561d18daf29f9a2b85db9e44adcf30bbfa3910868b8ba77569fe9f03716792baebe84299a9895da7b143050e0bb2e581948e0aac0f759455f67f724af7e

  • SSDEEP

    1536:wt3acxjaMbDyjNRDHyyhaaCWAMKb6Kek0R+KfBZhdNA7nxVUEpDOaJ6hACDZG8WR:KbGFVmqfRnf/hdGYEfiAWZZN3OemhCs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c09b74d90bdadea0ad093e6fade663d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5103a93307984590ac1c8af62b5083cd

    SHA1

    794fd015dea0c1a5668fb5882645aa2895778a43

    SHA256

    15419a29825566e4a5eb4f680b371d480f1a423bbb4856c4c2f955299f1e30d1

    SHA512

    d92710369030e3881b7e538f8454ad98cb323362af4711b4864b152736559ef5361973d4731be249116d6c3949b542302c1e511124e4a1db792d07cf57356f70