Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 06:48

General

  • Target

    43075ddb8a32392730e5788ef51215f9.pdf

  • Size

    89KB

  • MD5

    43075ddb8a32392730e5788ef51215f9

  • SHA1

    b7852692320470aa8f560b2499081635a7d611f3

  • SHA256

    8c7553305d2252618cb186780565e1f41a56bb720ad252e3e5ee8b7a383c0171

  • SHA512

    f9ce440706bb4a1bbd0654487d7bd5e8bdd06f6794ed5a7008475a04807d5387d9505d2946bbb492dbabd0b66c8dc69a7c8e312d4c741bcb601426c5cbed813a

  • SSDEEP

    1536:iGGEgyT1yeSvKz68Y3znQhXooXaKTEDTbyy2N6Wy42Pye3TDFXfWgWUpO7yV03W:rMyxdSe6njncXoorTKR2+VDRPWj7a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\43075ddb8a32392730e5788ef51215f9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1e057a0aa8e1493c74bfb22cef9ba4f5

    SHA1

    77259dd02bd9c15a5551ec367599b9b78998f4be

    SHA256

    7ac8a1443fd9a230fb7df31371d868ae3089824bb34155590142803daef427fa

    SHA512

    471061d066beae0c0e3b566f5f89487e051557a59f6baaabca6119f58e612e7a7d2aaa80930a4fdb7c2d91e68c1f5837a0d910d752501b4acecf8df6a366d7ef