Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

106f6ed5c5...56.pdf

windows7-x64

1

106f6ed5c5...56.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    106f6ed5c59c479c272cb277fef57356.pdf

  • Size

    43KB

  • MD5

    106f6ed5c59c479c272cb277fef57356

  • SHA1

    6ae429566d2b02f5f781899c61f7cb5140951f76

  • SHA256

    d1aa54a7a93234f6eb828688a75b6445658fea963c9396a7a9f027214784607b

  • SHA512

    ef316f428c88e6ca4246a7e208ad22ab77da997698393be70a9b5ebfdedec9ab288536152cad8e5031d22836e2ac286131af3927f7999c6708bb16abcde785e6

  • SSDEEP

    768:ACR364hh0V2g+zEBBG2cJax/lUL6fRl+KQVxO5GToBPfc5PzvvRieMSDN4q:zR364/0IgN1oMl+9aG2fuPzvZi3mN4q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\106f6ed5c59c479c272cb277fef57356.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5e77f0c5a6c014eb4634fb740a317fce

    SHA1

    a9fe1af248b568bbcc78754873bd6679427b0ed7

    SHA256

    f95023f6caef681f4270ca0b6723e031d1d0098090c4f0fdceef9e3abd85c414

    SHA512

    d6461b725cec91a644a4a425f64b79753833ff5f23fe82ae6555d43a76ffee100de12e5021780e3c12797eac1d3b8ef5b0410a9973789cb6cc22a99cbc6dd780

    Download Submit