Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 17:48

General

  • Target

    3aac4420a906767b7c06f1fbadac5742.pdf

  • Size

    113KB

  • MD5

    3aac4420a906767b7c06f1fbadac5742

  • SHA1

    b27a946f8e7d6bf0b2e951cb12dfb4d234c05101

  • SHA256

    4781c2fc022a489cb0b061af7308dbe0aa7588a6ce539e12acdde5038be21ede

  • SHA512

    76dfae7722dc8a5e1fb129cc129bb28e0bc4ae1b91537dcb4cece3ec3855483b52b93a5df3e41b2388d62e78a21c75735e5458c7df3e58d1e9269e6c5f79314b

  • SSDEEP

    3072:OMmzOSFzqpc9qB1lX3MaCJ0Mu2DLjIULB7oc7xme:OMmzLN+c9qGfLhVVt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3aac4420a906767b7c06f1fbadac5742.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0696137ac4f3aef39d7b33f7a01c9211

    SHA1

    c45be0c057fb919d46ee02b0717381ec128f8cc9

    SHA256

    02044e174f6d78e0793ca6acbf87028e36bdb91d5e0a2cdbea59f310e5ebc709

    SHA512

    69316fb50069318b481703c30cff2ff242d6c8f17ab196fae089b1e9886560d42f52bf478cdeff7d89ee2e5510b27b75dfcbbad0c915395c944d81e83520df40