Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

21c4df3940...dd.pdf

windows7-x64

1

21c4df3940...dd.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    21c4df39400eed95504c71571d6b8bdd.pdf

  • Size

    75KB

  • MD5

    21c4df39400eed95504c71571d6b8bdd

  • SHA1

    cec572aeccd4a5526ffa74ae8ff792976beb6aa1

  • SHA256

    1fa8faae2ea549e25aa3acba0bc3ad418bb2984ff072b5c5c3458a66a304481e

  • SHA512

    7099cbbc3dcce25258631202565528f731821e38c2ea938f6b9a98fe66d1d8558774d927e938d3bbf7ae89b9042ef54abc68f356e13db550221830294e76d504

  • SSDEEP

    1536:14vTNrhuGawOpEZhWcLODJDMe9ynQBWfhbBPj6Rq0GaPWQpOCV7ZLHQp:Ktza5ge9yQ6Pj6RzGaaCVVO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\21c4df39400eed95504c71571d6b8bdd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    abab17531c1d5197b70f5c877d7098a2

    SHA1

    1dab574c929b5239c6d7cefa3cffd90617e474ea

    SHA256

    7cd90d5f951f4624965f5e0af2a58e712c4ce2e37b803239bd13f5e8ad3fcf0c

    SHA512

    3d81f2bcb43bb9a0a3eb9216d0284ba2c76e69e9ec911b2635c880e3d3234ef46663ac075adc81eea7c2b349b1cfcb494431d416e2be0fb1affec6ccc3781a4f

    Download Submit