Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/01/2024, 20:48

General

  • Target

    3f0a8313139524af4f9596094e4c0f54.pdf

  • Size

    85KB

  • MD5

    3f0a8313139524af4f9596094e4c0f54

  • SHA1

    8b47fc009f8112dad13622a6563ae99f0836b5dc

  • SHA256

    6f6e1e31870fb1c0b0456441e9f13b6cf6a8da2e51c12874ef269907a5420d8a

  • SHA512

    8b5868a4fd10ef78369118c2a273a360523a4348db0909d6f284a64ece0aa9cf0c5415e738dd189d19c92875da3ad3e98c559a6e74bb6d0e5210c2e4f6ddc9f9

  • SSDEEP

    1536:soY4e02iKNPxHKr4gWDD8FME5oow3tljI85+pX3txIMKj6WOpOwrKWGkj9HmsLmD:zSoO4MmF+LIK+pXvIJjvwrPj9HFy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f0a8313139524af4f9596094e4c0f54.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ce55fad782faca387322907b24739891

    SHA1

    9a282f156a1122fbd310b18b842210c79ce7d032

    SHA256

    caedb1bb0d6462c55e26a1fd9103f8c40f88467999f77169d7c9dea03495b11a

    SHA512

    cf4e1033a4da63c62ee2e150c165e119514636c52c43017f76a465d2de00b2369970dcf8154b121eb65f9b358e25964d90a45d7e028e7f9c366f4f114c0ef135