Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

222df46a12...9c.pdf

windows7-x64

1

222df46a12...9c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    222df46a12f6cc42f7a75d2201782d9c.pdf

  • Size

    597KB

  • MD5

    222df46a12f6cc42f7a75d2201782d9c

  • SHA1

    9c6d9d2048c8ccd958b3e87de0b2e534bb509fe8

  • SHA256

    c5f0935f8bab5d976c42eecda3c1b5fb2909afbd6e6cb5baca234e800be0035d

  • SHA512

    3cf48a69cc0cda5a641d23f08aa9aaa61d1e05a257d846160ea6ea46272a8d3d6a9c170d79c178e8498f959df4a2af565a241fd58000a1b46cfded17b384eb17

  • SSDEEP

    12288:0Do6MpQ2W3tW6GG3Ooi0iMULv9A35EHuCmFw6zjMNSwkoayHBA7Bd/:moBi2ww6GnNV82oFPjMYwkCh+Bd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\222df46a12f6cc42f7a75d2201782d9c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b419c06a1d72fd07d5391c39a72453a9

    SHA1

    ff4df1c7be6909623b6337050fc1ca660669971b

    SHA256

    717546a9666b3ef387755e73ac5dc83cc0417a31a8d344d70eb90ddf5a832693

    SHA512

    d5f4637d72293bc44632329e9bf1b5c0862014fdbe357cc20084aeb099ffa754003e0cf955c2895d6217bad1f473c382ec8c39564d01ce488fdcc2aea3e805ae

    Download Submit