Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:55

General

  • Target

    2253b1ee782799b1e75c6bf5ea78eb95.pdf

  • Size

    98KB

  • MD5

    2253b1ee782799b1e75c6bf5ea78eb95

  • SHA1

    adf09c05eeb0d6498e915f4578ae2fbd2c2981b4

  • SHA256

    bbede23b70984d370f43dc149bacfb46b0b7342accc2b72074e4cc68d37816bf

  • SHA512

    4c3202c391bacf9760d58e3eb98e33c567211389c3738a0ab702a75b4ed02c8cce050c5b43fae28a98c8f71f68bb22fffdd25a531d80f3f9e7009eb903f1fc02

  • SSDEEP

    1536:yWQFkEqbXGe/mDxkTQNgG8sVunEXcKS2aVuQPij3BFOMoT7qWYpO2+wRTFrWJNxO:AhqblmDaaYnQSDsmi9a2+w5FcdT4Vx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2253b1ee782799b1e75c6bf5ea78eb95.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    db12d4c8337e242d7d85763a4a0349d1

    SHA1

    bd2333d4ac13c1ea4a84c02376bf183411b3601d

    SHA256

    7ccaf433c47f70375885c384a85a6c792207d4df7f89ab0ba55bfdfbf369a837

    SHA512

    d166ad91ea28c0a5a3e82ed7e0aeeaa385ad877bb013157e71eced93dcbba6a555cc47df64260f2baa3a721a1c1aa562896a04ad56cfa1cfb6d2ec6dbf10a2a7