Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 21:16

General

  • Target

    1caf9baced429121fc2304849806acb1.pdf

  • Size

    85KB

  • MD5

    1caf9baced429121fc2304849806acb1

  • SHA1

    ce6675c7f7162629efb2fdbbe3743c5d53188ef3

  • SHA256

    363b63a458930fc5b9fbf0a884bdb33a6cec31a1775522f409c5b139a7018d30

  • SHA512

    e306ed62b50d0b7137269a023ec9446fb52cfae8f6a928c2b3f7a5b92c42e7b2ca710447e7ac1aaebf06b47fefc6353e91d3ce7947aea5a9de0db169d1f11253

  • SSDEEP

    1536:KPrrxSymOnTLv9lWr4XN7NU6XCli5x7Do1N8vQs3+Tk4WYCP7YepWOpOaZ/HcnBg:so9YTTWryNBSQno1NH+jJiaZ/8Ytph

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1caf9baced429121fc2304849806acb1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    97ad3af179568dbb200a2c647a77c61d

    SHA1

    ddf0b2ec69d09efb522b6adab8a84182890def88

    SHA256

    d6f5d8aeaabeef93245917e792b4fcdef566191d579840e8757a131e9b1621dd

    SHA512

    2d3a587aa594991be21903cd5faae4dde08029267a87d68ad2169de10bba7872a9bb9efa03bfe84d13dfa3317d58e9ba48c5f1c1de861a04084b9c62b4ef9e7f