Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

26ef7a36a6...42.pdf

windows7-x64

1

26ef7a36a6...42.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    103s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    26ef7a36a6532429dc929fc950c19442.pdf

  • Size

    197KB

  • MD5

    26ef7a36a6532429dc929fc950c19442

  • SHA1

    7a7b7eceac0bfd820c2aa28c68573c98ff074133

  • SHA256

    4f649953d43cc51611a81c3630df8f219f621418cfb2a4a01aae8e58b36b7d14

  • SHA512

    e724c58da9706832d513d9dfac9871db23af2943f5b2753e5a457cf9b62fd36844f48528868271b198f0758d68331201085f320d34928eac38556c750b728731

  • SSDEEP

    6144:y/jsg2ocLQbjQ3zJ7njeyDGz8uuVUey84K9hC+:uYzzJ7n5GQUe7u+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26ef7a36a6532429dc929fc950c19442.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    dbdc142ece844f91450619a9e5282f16

    SHA1

    7ce25dc7b07a07b4573a82357b143fd2008068eb

    SHA256

    c59804d7e4c85ebf2c405010aaeadd0c5dce1a431ed4800c9853988df7349c57

    SHA512

    e185b314a6c7453ff01dddedf931cf36ef709290e49d203b9bb539e123d0cae15f90452d02c405fb58424afe610a8d7baf78925474526b749fc0f1671a2e0bd6

    Download Submit