Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

45d54f8440...f0.pdf

windows7-x64

1

45d54f8440...f0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 09:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    45d54f8440264133f15782c8b27547f0.pdf

  • Size

    35KB

  • MD5

    45d54f8440264133f15782c8b27547f0

  • SHA1

    ba027cf0ac06582a9a41ad4197bc68d3be84dfea

  • SHA256

    5e6d7a6c8a6116435dd44ff25dd2911fbd997c85441eeac5814be08de80042da

  • SHA512

    48461db084c353273d3ff7f0b274f07dab2c97634741ddd1079e85bfd898055c4e6d6ab1b2f58120efae4d5627963694b5e3fb48f6800779e788b450053ed4fc

  • SSDEEP

    768:evrTmLyjIsU9OlytDxyKwMqxhAFEKe2Rmm3dlhgaw:Y5jsOlgxAMOMEKe2Rmmtlhgaw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\45d54f8440264133f15782c8b27547f0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3ff8d725f5c36cf5e150aee46f0fcf38

    SHA1

    9d92ecd5e7c51cc2bb9f3eff1d1d29ec25e35b25

    SHA256

    fb8c8adc793b629e87ccc088bc73b7446d5a12510cdf5bacff884c637bedf02a

    SHA512

    ae15fc328288b3256efe2610bd733de78adc02a098f0e1eb35d5ece5f69f7580ffe74bdfe3df48c227059181ac14bdd448f519a6d802f2d11e93e1331fdfbf22

    Download Submit