Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 01:58

General

  • Target

    239be08fe920bd8a7656fdd255ba7c78.pdf

  • Size

    168KB

  • MD5

    239be08fe920bd8a7656fdd255ba7c78

  • SHA1

    4327351251a6142eeeeb2dcae14e8c2835ee72bb

  • SHA256

    0b6c7bfa76364b2930507f4c0a0273ac171752dc6f688bb3e0ed5498cad0469d

  • SHA512

    2e2c6af5e22172690034ca3d401fb1b883c73723934b986ae5168197de235a6c1a1799313180a43e4cf699f6dba3dcdc0633eee227fb277d68b1c08a42ff44ab

  • SSDEEP

    3072:uHuZWxq+shznd8uoTq0DIZ+7oNOhxXF1p3CmiRK2cLPlU/BU2fqI7gD4ytQ8EW:yg/nd8uohD57owJLpSlULNEhBCN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\239be08fe920bd8a7656fdd255ba7c78.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6c9ff4ab79cb8d6b641bb5a391dde593

    SHA1

    72437f205c030866c821223ecab1e293bdb41995

    SHA256

    02c80e3a283bde3a60c6bce1c3f815882c14dda9c677d580ed505b6a98236e31

    SHA512

    d6e456aadb3edf247d881343c9b55fec690490e3893b2992e6588df356d030b8631c4d36004ab9a2062a231f19d7862cebdda61478dee32de84375e9587a054e