Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

2434555fc6...b4.pdf

windows7-x64

1

2434555fc6...b4.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2434555fc698aa4f9615332fe71121b4.pdf

  • Size

    91KB

  • MD5

    2434555fc698aa4f9615332fe71121b4

  • SHA1

    e687a90c534d25a7ff65e298581de6d287b1d37d

  • SHA256

    15ddc068222bec490bffd38b61bc43fdae0a5599abc552ad3d9ea9454473d813

  • SHA512

    52fe77c02dcdab2734dfcb1356825cb71fd0b1a41d10e232f03374b7681bb2cd4e263f964444da1ee950f5193274212513badfc017fae17397cdadd197810629

  • SSDEEP

    1536:s8xwtA3qXRDuwYgcuBumCdqyvAsAib+n0bCX2DHSb6kx/S/WcpOyJS1WxY9Wvwr2:VweaXRCwYgcuBnCNYa60WGMquyJSSY9Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2434555fc698aa4f9615332fe71121b4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e4fa1c8ee03487ed5ec19993f4e6369d

    SHA1

    3f000332e484d5137f08a930a7553a7f942128b9

    SHA256

    40a25ed3e56e8b44ef48f1a291ba151b4aaf2882e95081bf28e76b974bfb757d

    SHA512

    3dd96dfdac80280bc4b51b77e925b3e6e2eef8b5b13cb1c602dee83ddfb166bd7821143b7b81ed76c204c21b8da4e2c38c76ef33b2d9ecfe83630b68fd60c9f2

    Download Submit