Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

199b041112...b7.pdf

windows7-x64

1

199b041112...b7.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    199b041112c08ce38ace205bc41420b7.pdf

  • Size

    68KB

  • MD5

    199b041112c08ce38ace205bc41420b7

  • SHA1

    f9dc3136dc41e5bc5f84d0c842795e5d4d5612d8

  • SHA256

    e03179b4095b84eefb018d5d97018ba37c4197a93a761fdcdc0b88ec94815cf2

  • SHA512

    a8342156a052f83b4368b4f15d5c0edb9275a558725e3a224724e3f5a3b14a64bd90f75cd9b1a59845f832c40f6410901ee4372cc70356f2f7253f8cb3d755b5

  • SSDEEP

    1536:BHo0MOUkMrIE/pyFs7gsnrnWBK/sPBvwPirnZ3pdhIJk:xo0MDkJE/UFs7gsrnW2s9wiZ3pdhh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\199b041112c08ce38ace205bc41420b7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    fac976518b43ed56fe2c6be3429fafa6

    SHA1

    4f329fde27552a7f5828c938c26ea7f8cadfe5ce

    SHA256

    6dc7d8524aa1164ce5f9a7b012af7c22453c176f4e7b92371a1bb61d60f8ffbe

    SHA512

    119cbfae4aec5c1e87cae94a73b93c0c638135279e0977ecbf54044ff3a43eedab30ebdcb10e0b82a7773875f1e634c076e12d887a0c072a0500759a79133354

    Download Submit