Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:02

General

  • Target

    2591b324699cf21539b7b2c48f95c838.pdf

  • Size

    34KB

  • MD5

    2591b324699cf21539b7b2c48f95c838

  • SHA1

    550dd861a5f6d374fc376e3a847981a018af9f1e

  • SHA256

    013f986b9a169e2e56f0124b4d7b871d0a6771ca572a8aaf39909927c8af6537

  • SHA512

    a1fcbf3b418b07f3c691606c4b24f917f5a75c71c4b2fadd728a0ae7642c88167a955bc457381980675ef6d0e8f3fd3514bd5475ff7bf2831ccd930ae440d6c9

  • SSDEEP

    768:5oFtin2vl9MKJd0AtsP/JkSm9sZLGN/jqg4sVBTS+x:ytiQloTPh0spWjqgxS+x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2591b324699cf21539b7b2c48f95c838.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5a13dad6b0ed50517be5a9e36e7d1164

    SHA1

    0904b8132d62f8274df20daf00454e9700cd1688

    SHA256

    942f330b2b368ccc322b1ed7fb1cc15056c3eddb819cf551f3991d48f79fbf8a

    SHA512

    5f0946f50d6106fcfdb1201ae50940e301f5cceb2fb71a24596a3df2534d7591e0584fe0cc67c8e3a48dc2b802138e6a4b9d1f0258f9c95624ef7be4154ccf49