Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

3ed76009c8...09.pdf

windows7-x64

1

3ed76009c8...09.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/01/2024, 21:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3ed76009c8baa493b4d3dcfb9d30af09.pdf

  • Size

    40KB

  • MD5

    3ed76009c8baa493b4d3dcfb9d30af09

  • SHA1

    e853dcf4695f15b5945a9cf248824552fac7591b

  • SHA256

    fdb49d25aaca240fdbf5934ebc4a9e5280e050b518482c57c5a5566f66a91a57

  • SHA512

    2d5ae131d166a6c6e5f9421976a2d54aaf2b421aaed49d674ec5b5ccb77e77d73c2325b04c342d3a97ec23d4ec789e6655682487b8093efaf0340eaf1ceaae88

  • SSDEEP

    768:1yg+50VhTSXNOhCi463PwbsEGrOVZADSDxzOo4cjhv6m3:1Fo6GBcwYxrkADSDh6m3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ed76009c8baa493b4d3dcfb9d30af09.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1dab897673f3f5ef066959fa917631f2

    SHA1

    8cda477fba75fd32057147202664a93d8ddf317e

    SHA256

    1222f518c4f4131f57a3e59342216902512fb7ac204b76b7b8fcccf358ef74a6

    SHA512

    0bdbb34e6050d853aa9509f2011ff2d7cb0578ecfbf8e824f042a8d1dc49f0048a665517ef4c710034195b21facd4fe95a1e2ec2091b45745bd8b4e0782cdcee

    Download Submit