Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

28930eef81...10.pdf

windows7-x64

1

28930eef81...10.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 04:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    28930eef81c2b887c4848c5fbcc28610.pdf

  • Size

    82KB

  • MD5

    28930eef81c2b887c4848c5fbcc28610

  • SHA1

    e2814a304cd66951a1090e6651ccbbf109c0f4ed

  • SHA256

    10a3ef427151f519ff0ffb5aa3f5189e74b86911ecf62d4b75afc68210598e83

  • SHA512

    4724d4b115bc73607789bae0cfddc1c00afd5e56104c35491f30544f5b963c8d0065754e1781a5e11174a77a92b8690acbaad3df29ffa620efacf63e71d00a8b

  • SSDEEP

    1536:qRN955RvXHTQlw66baGZRmIXi2qlX8O8u51J0WCpOViIW9kga4+ozbE:2v5Rfslv6baGWr2qFuu51J9ViKgaPos

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28930eef81c2b887c4848c5fbcc28610.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    df884690f963d44b24574372a03e44c2

    SHA1

    e47a85373e2b1539da4effd61647faad7d5b2340

    SHA256

    2ebafa7b0f7ac0f5730360a8c2d01745a359eeec6425bfff39ea81a74b8e43a0

    SHA512

    25e89e7281a0424ea6b5f33782f8a95f41b8726233b49b7793baab4515a159f1ce3a6b50557d9d979d7f1631a94f7ed3ca6ea6dfe480efe7bf07199ac2aceff4

    Download Submit