Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 08:29

General

  • Target

    1372f9385e5aa2ad137aa896ef27ba5c.pdf

  • Size

    81KB

  • MD5

    1372f9385e5aa2ad137aa896ef27ba5c

  • SHA1

    c9230a18c2c685d9b4f5a6fcbc59285af4338d3c

  • SHA256

    918b9f078dc6792c4746cb269a33236b4ab566ede29fe36b3dfff6f0d43e756c

  • SHA512

    23bb7d26a429a1d465f2c7d98bc49927b40130a39ddb5a3f3b49ba442323d88a60960e2d7e95d6201065f9b7e7dbb8645de417daf336ad054f35c1d8b8fdcf1c

  • SSDEEP

    1536:uvamRCsoAAwtQPG2Jz8ZkP/ScR3rTkULwOAkuonlPK2UP0e3iyKazykZa7qLo:SamRQAAwtQ9Jz8AFR3fjLLBli2UMe3GT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1372f9385e5aa2ad137aa896ef27ba5c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    633a806d65c29b2c64381e0a3e387843

    SHA1

    68d797c2e943cf73e9cc8642967769cc2b27f0f3

    SHA256

    3d6113dabbaf78f56ad32616d6fab0f4ef65c7cd032757b323e856051af1f3c1

    SHA512

    eb8bdd1f100b925746b257e1bcf48b89d9d6bc3efad32c9e1defd6f537b967e965730dbeb4110aae048a84076f44c36855631eaf296eb7f36c3b9f0f0f4c5167