Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 01:01

General

  • Target

    227c475d33a3427843d47e5d5a6eed43.pdf

  • Size

    73KB

  • MD5

    227c475d33a3427843d47e5d5a6eed43

  • SHA1

    30f8537dd6164e8ad59e68a93492d325fcab851a

  • SHA256

    2f8cf2e5f2e6be651817d4fab1b153c6751af6f37c845cf2433fe4305b7db7e8

  • SHA512

    73065dc0f1bf1f0350ad08ca8bbc4afcea6268ab5d4cda638bb0e74f21d0e0902748d3e26076e836a42e3b045b61ec75eef14aa8a5e0f84b01552b06bd68eb5b

  • SSDEEP

    1536:erq4X4WD1YsZdJ/lNaoP9jZeFA+TG6dnTWfweIedSPSCZnGa:Kq4X4WFpa+9EFAj60vI+SPtZr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\227c475d33a3427843d47e5d5a6eed43.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    68c01ea39cafe5ba18bdaaedf27f23bb

    SHA1

    1052e450e90202266721d38e83b56055c22553d9

    SHA256

    a2708a88f3d11b1fd9690687cb564a0b9362ca8898365d40d3591711a0655283

    SHA512

    7b8590fdf91356a4a7ca0f55875f3ea89f8673d7131f5d65b6ae150f9a90cfae27dfe20f8cba32a1de2e237bebb8fe8f0dd8b552522329711cde745c103a2b28