Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

280beb40e1...13.pdf

windows7-x64

1

280beb40e1...13.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 04:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    280beb40e17b1eb9981fb5d209a0ce13.pdf

  • Size

    86KB

  • MD5

    280beb40e17b1eb9981fb5d209a0ce13

  • SHA1

    39ea7e43a5f06b994d5ebf37e7e7402222ffbaea

  • SHA256

    11f73c274e0f573449573860660513dc975f11d72bec94277c0ef1d3da43387a

  • SHA512

    19d573d426b031baaee79b15242e820925839f2d8479ab858a01febb489c081daa6f9fe68764e3bfaf6493c3eaf1dfecad1fc89b433fe26a247a7def832b220f

  • SSDEEP

    1536:jlWyfufu41ZuxBQcz8VOyolhvdxJ8rQElWe3DW4S0VIWJ1Gp/hoWduKjWepOyEAT:vuf7yBQvrODjoVgenVZ1GPsKAyl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\280beb40e17b1eb9981fb5d209a0ce13.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    befdcab1defa58ff1fad23c23c0f6af9

    SHA1

    04d0a599b120863c42de9102a3876a1d5629ffa6

    SHA256

    0e268a9e456d745d7414f35e263648b0d934d4ab8b4c9e28d48b5549a47b8e04

    SHA512

    9fd632a60bc4aef5997b78c891a92f1a47a0e8e1c7c5a07984661c46e5d76dd9f2d5179bb8bf4c050b7dcfae0b0b9b72213e8591dfdc1c1cca5f24ff743c8579

    Download Submit