Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

0da7fd7484...3e.pdf

windows7-x64

1

0da7fd7484...3e.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 03:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0da7fd7484c05db326d6e4eaa416993e.pdf

  • Size

    78KB

  • MD5

    0da7fd7484c05db326d6e4eaa416993e

  • SHA1

    c006d4ab2547838aceff5c18a44d099313b05b4e

  • SHA256

    844afe0b74b6fea2bfcfffd0987f669e4e26ce33a858e09d65766369f888c4bb

  • SHA512

    e1ffe12cf6a59b828d953894e3727a7aea90e7869f22be22965d6ee9dc699a565f544697162f4bea312758040e7c665f18705bbe7e0e7aeedf0347db02ce775f

  • SSDEEP

    1536:qEaT23JLFf5IFwECuDxRBDyltqhygsdv4yhiO6UtMH8gptYE+IUaJ+JrhdcQ6:/O23dFxkDfBDy39Ff6Xq/I/+Jrjm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0da7fd7484c05db326d6e4eaa416993e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    463ca08f2524ea62afbbb4e4984de8fb

    SHA1

    69db92583a7e57cf2040dec7957ba69b29f05b86

    SHA256

    41e511ff98aba31b4ac35a0e52dea5b6dfd44b506c4ea1c252b97f5a0f72a27c

    SHA512

    7cf73284e387ef765f9a7f966d3d78e7bd59953758bfc1343f8c3a01cb4b450733d75afa11c78e3009525cb6fd24f73000b20d8156fc91e22d99bcff1fa07905

    Download Submit