Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 21:47

General

  • Target

    4484259cc6ff91e7c286bf279cb354ec.pdf

  • Size

    75KB

  • MD5

    4484259cc6ff91e7c286bf279cb354ec

  • SHA1

    c5673ad893d848b2f84dace2ce5fd582d149b80d

  • SHA256

    a2e92399752034327b8cd51d9f7e1aa2eeff697ec960584f29624c2b1d0c503b

  • SHA512

    381bac66299a6c600ae596a727a00422ce05a20e41a0d33aca3a24963582565f408123048622dbe45ca979df14d0418d60935ddffb1d255d8451199282184533

  • SSDEEP

    1536:/3IGq/h4RyEmwnEHh+/MwzWoUG1ftKifRsqKh6QZDm9EOiwaiN/tc:gGu2UEz/MwC21V4SQ0EOitiNO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4484259cc6ff91e7c286bf279cb354ec.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    583449904d4561e6b0488e642ff67514

    SHA1

    b5b685780668fe2a02c837d6fbbc18beed4c7cc6

    SHA256

    40e4b622b3cb90faa9ba4f449a78f1c25b6d8c56018626b1226965bca809f1d4

    SHA512

    760b899e96028757d85daba0a4320f6a7d29285d0aad5e469c0c2d6422c55e12ce6e36fae131d5ea25c148559272bc9e6c9ed3cf45bfef8b6c3bb898496fb76e