Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 08:26

General

  • Target

    4337c00cb5d20ec1a233fe54c144fb7b.pdf

  • Size

    86KB

  • MD5

    4337c00cb5d20ec1a233fe54c144fb7b

  • SHA1

    241f88eb065c262397dca0a19b699fbfff597a1e

  • SHA256

    7548086d2914c9f1eb355621945db92ae63fce6d28b1d4678c6de8e8fb9d0e41

  • SHA512

    21c446bb409c1b058c8f869e4698dfa735f76c14a78264be1bafc9cf2cfe4464cb4468422ecffeed1a24314d60e9a6ec1f55ffbeaf43f9a3574a542d387bcb77

  • SSDEEP

    1536:o1STzuq9zZRQm4CKbQxDXHWHf7gnuikTIQlGSl1nW8hrNnoW8pO73YZd:NTzuSzYRbsX2Hf76lMIQMSThhnT7y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4337c00cb5d20ec1a233fe54c144fb7b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5a7540910140fc2b4982a2711f9cfb36

    SHA1

    8ceaf58f4310846e08f0d0c1ce4aba6b32b58a2f

    SHA256

    f539a07f9561e3654dc8fae37f45cf2391dbf81219854f7c00b4a113507c5199

    SHA512

    cb6d71b7bd0a8154aaf351fec8707aabe491e7e7cc16e7a97c56243ae5c0e92fdef656a38285a0c112d945d060023a7da39e9e4fc1ac373c8e132c6fa2afc7e5