Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    208s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 03:20

General

  • Target

    3fc3c96135f3ce7b39fbe9035b9dd33e.pdf

  • Size

    90KB

  • MD5

    3fc3c96135f3ce7b39fbe9035b9dd33e

  • SHA1

    c7a31235b33d2b93953a8a9ae664f2dec34ab256

  • SHA256

    96494be21683ff30544828eec556ae488046a5ad56bd9b82d3eb2677829edff0

  • SHA512

    bddc627db3378b853b80f00700e39cfac5ef8efad2ee299cee52ec97595cb911a611230e3424fa0a77b7871d2dc76bdcb46cde30d5fac8367208da018b06c657

  • SSDEEP

    1536:mitcSD8Grr86AAoYWEhfq4jj9lCHVg+SeIowp/qMzyzWkNpOPaWNySIxeoSeaG/A:35DUDSV9lq4ePwpNP/vIxeoSeaV5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3fc3c96135f3ce7b39fbe9035b9dd33e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4ad30bea8a54e7ed1dae6d22db25a90a

    SHA1

    2f0303d55ee3be4257567db8cfdab6d626cc06f5

    SHA256

    d76985b0f981bfebb581d3cb4684b60c06a2eada2d0e5f0d2b3fe139d37355af

    SHA512

    66f4b97498afdd504baf69d17807d3dabe151d771a1cb8e977f0f9c3ff42b432805677ffb92ec992a0bdabd20e43ccdfb837f433191afa2944a93c9d68e5fbde