Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

43eecc2d8d...ae.pdf

windows7-x64

1

43eecc2d8d...ae.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 14:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    43eecc2d8d8a1dffdf1ebbbce469cfae.pdf

  • Size

    88KB

  • MD5

    43eecc2d8d8a1dffdf1ebbbce469cfae

  • SHA1

    88f605ea98919c3fffa4ce26d9cc74313590ec5f

  • SHA256

    bc8198b2f5ae480bedc3f4a8ed85f77b6281730f9e7faa65b162f02a4cc6f521

  • SHA512

    e987fad6bf3d79f1680cec515f0bba0c1409ee86453312e43a5f701edf268815947725e9be78292165777e8bfb7e6b157a79576cf9899300106c04f237a5628c

  • SSDEEP

    1536:e0i55dqpC7WVVJMzvj0d2dsLdfhmUTeLhGpXd8WkK3ehWypOlWWxqlf4ez4u2wY8:34cpgWVvev4drrmUTRh3JlDqln8RwY8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\43eecc2d8d8a1dffdf1ebbbce469cfae.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    212863c869f997c5396196ed2c48b0d2

    SHA1

    570b89f17260702cc02925682d2009e04fc58e22

    SHA256

    a99b844a7a66412ecf63b053f64557e67fa2f26e199d15b2a2b70c1891add324

    SHA512

    58f0fbdc1a2d057e430e11e00ca6d6670ea88f305190acef62bb17c6f108a94d9feb71ba3a9744d2092eb7f6d404f9182b36a59e32115fc89d2646b264657837

    Download Submit