Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

460731e323...f8.pdf

windows7-x64

1

460731e323...f8.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 10:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    460731e323537e291758591cebc32ef8.pdf

  • Size

    81KB

  • MD5

    460731e323537e291758591cebc32ef8

  • SHA1

    584729aeeffe8545154b13f803bece2428492475

  • SHA256

    2eda428112962de4a7d0ac5d751a04b5638345e8fda1271abfefb595234884b1

  • SHA512

    a2336b7d8a47c544b62c9f609bc84808035e872f44a9acba60a3e93f4c0b550af52d2bd32691ae060a66b18977f656ae1273c12f53a30bb36cc211ec1aac5c83

  • SSDEEP

    1536:xqLDwnKOhl8f/KKURHYrKibcClMltzANUQf+wcgNmW4XgarWapOtQH4ZNFh:kHS2frCY+/ClMl9ANUhpgNCktQYZZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\460731e323537e291758591cebc32ef8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6437649236065edd937f092df2775c6f

    SHA1

    984dd324667b2a5c27f2794f8e7b17183764888d

    SHA256

    afe899dbe4a2415c0a5d36f8f1c0ca49cb2019f383ecf9bc9a5f9878010d8e97

    SHA512

    049f7fb2ad4db33364c3019df1e31af26ca79e6bf48b7244a2cb35bbe2575da36204a2bbda2aa129f300f91879b77d20cd2eee98b79dbc87171f61888bee2705

    Download Submit