Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

0efacbca20...e9.pdf

windows7-x64

1

0efacbca20...e9.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0efacbca20d60aa4d41315d24b8008e9.pdf

  • Size

    35KB

  • MD5

    0efacbca20d60aa4d41315d24b8008e9

  • SHA1

    08dd1318333a0d928043aa4ef9484c7ff7517e30

  • SHA256

    5e0291944ef191b7208f4c7c8a17f57ececbfeb0e0554a2c02b725c4b1948b84

  • SHA512

    339cf29030bf6c2e33eaad5bca30f7e0feb0d1d3a8d281d8e21e400fa9881ec5047758088a5710d156de27989da6494e5236dfc859502a0b10429aeb38337012

  • SSDEEP

    768:D9zD6Zc2oaEfysZ08+acCFqdRoWopoYNSbADe0AMGzySoUGXD:D1+ZckEy8TcCFqdRoNptYAczN5GT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0efacbca20d60aa4d41315d24b8008e9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    7884c641b79ec1c33f90d1ec1a0753f1

    SHA1

    4c5af811bec0a07f17bc510011fe752abbdb9867

    SHA256

    11e5e1e52aa15fe58ce3bd56541a679f4a378235fcddc706650025d5e411a38d

    SHA512

    d2b4a308332ecf61287cbc5061aa06cd2fc2e66af9722b1f2230ae88db2445a881389f346e7e816a92698f377ea6cd030a9683e157eb3fbc1b58f76071e6a095

    Download Submit