Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 08:55

General

  • Target

    13d6c64dfd04878dcf2c46b0d71f3825.pdf

  • Size

    79KB

  • MD5

    13d6c64dfd04878dcf2c46b0d71f3825

  • SHA1

    43164d03b7a15542fa3aad72deffc52071f75fc6

  • SHA256

    7456d20868f7a8d45a9e82059320eeb6a797091d067e2164d422012cbcbf7273

  • SHA512

    711a50ae5d91816047d115c31081b85c7a1a90fccf7d36fc79de7f083b8ae3ee652b7beb7ba3abcc32e2b61528d143115f54ffc68920a16736c57339bab25f71

  • SSDEEP

    1536:CLMGh2TQm3NDESoTtcGQiGAWL6BHH8YkBLBMQeW8pO7FsC:mJh+9ETBQirhaBMQd7H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\13d6c64dfd04878dcf2c46b0d71f3825.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d181c7cb5bce829ad7fb5286e761e866

    SHA1

    f8a2d552bfdd923744f12e5f9917827cd880aae8

    SHA256

    700d410ec716bcde579472a22f131e78bacf0766a4b84f5e578ccda160ad1d54

    SHA512

    4633d7bf9f73054fa476e30a3665786fb6ebd8b6bd4b1403cbd2ea743f859da57e1474a10ca2dde03fc2a53bcbe22c064db8ea80bfa133d76bfe9e8eefd61983