Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    207s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 11:26

General

  • Target

    3cb9782a89d5118e166268cee2422bee.pdf

  • Size

    75KB

  • MD5

    3cb9782a89d5118e166268cee2422bee

  • SHA1

    9eedc1460189169276244a8d8ce1a98245a10c63

  • SHA256

    562cf5b385bef531aa705a01224e5e7d3207e7e8c6aa2e6582656bbda689e2a7

  • SHA512

    b0b7be6c00c08d676a9a9f2db7d9b2835492b38d1666dc2a88b7e2b3308cd7efd9098f30bba277786b629206d5d2f3e71cbf65629f1fe413baca0f78ddc4752c

  • SSDEEP

    1536:3YYgT2O0EQ+EbOpkyG+TMxWG3/lwnFBl0zU+yNlMpBD3bGGf1xY:9iX0E4bO1GYMZwLlU0l0D3qi0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3cb9782a89d5118e166268cee2422bee.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0d50a348266a8c2ebfdf5b956f1c93d1

    SHA1

    66648b9fc1fc70cd926e3d45251733d42f0aeb2e

    SHA256

    d1baf5c7a88f01d7743684ddc08409d1d775d1fe0902b7444b154b9c5a47a92a

    SHA512

    a2906741a6fd19f457fc3c799fc4694dfce0f448809555296a8f314f225cb4203230b8835adb813b9ff19b72a26f2e85a8ff458608d4a31ca3d1a0890c282130