Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 07:07

General

  • Target

    11c1ed71d9f98fd7784e212f7d777737.pdf

  • Size

    75KB

  • MD5

    11c1ed71d9f98fd7784e212f7d777737

  • SHA1

    99310c6bc21e9ac653399bf46aef6c3424deb6d2

  • SHA256

    1020a6e550db2e563b82fc7405e82b3a8f18e708d426dff8a9fdc548eccea8f5

  • SHA512

    9d1956e03c97427de3f91abfcb996cdccc16ac843b5ade0030238a5a6505fa74311135ea2b7c30079f9045bef092a2bdd2633ac47b54ed6fcca831df3ec0124a

  • SSDEEP

    1536:CLG8radhMENCHaTDt26UPOaFzZSVNIHY+a/M7myQEAM1v9u6i:SrUhxC6XttT2YP/CQ5MLo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11c1ed71d9f98fd7784e212f7d777737.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b1cad22800dae0d5ad4c2ab36d4a67b6

    SHA1

    18e6afb0725b5c8b7cb1ce8ba8d8522a3eb957c3

    SHA256

    4ad93aa08f1bdd976b072bb8b3dee64620725869bd69b435169ab70fe29a3b17

    SHA512

    9e913e2b353f83a4ade40f813e634d5bdf4cd2de712311e077324c6d9a1f6f98cbc89ca3cc58f2286d7f63e72aed7ff05baa756fb074218d538b3af55d2cd63b