Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:05

General

  • Target

    0f86fc2fe602f6dc794a04db5087423d.pdf

  • Size

    82KB

  • MD5

    0f86fc2fe602f6dc794a04db5087423d

  • SHA1

    252ffd1d441dc425a381e10e450582d8df8ec4ff

  • SHA256

    6d4a9b0988da8029264794bcb90fb2943383b1ce608857caa594fcc994c19923

  • SHA512

    48f38440751e9543318eefb0d5637303d9f7994b64363d309c27deee5f3e7224e7da8aee0aba988ab92fe4631595497fe84c5208dca72a0e2b4d4ab5e3e79334

  • SSDEEP

    1536:ctXN7dESfvGLmV9YUASE5JOCxdX1VemO9j0SXwQPGpfxIzAsVGo1EICPaZlTB/RC:QNlGSQUASEDOSdXD2xcfmVQ3i95pedt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f86fc2fe602f6dc794a04db5087423d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    efb461fab11f689f0826505b9419535c

    SHA1

    aec01c3c3cc09ab7c9fb13c4a9cb922448652bd8

    SHA256

    7c3c34052afa1d360b32df13c99d18507057f4c5ed43cba82c4147712fadc664

    SHA512

    3584fd3ab8236cf49d0015179f96194ac00bda9f6c0f69f5a4d3cdefc9e57bfc3484fa6cda38482ceec4cf1a065069ed69f0a2a0b28796841163b602f3ec52f3