Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

47891bd75b...55.pdf

windows7-x64

1

47891bd75b...55.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 00:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    47891bd75be2b1ea22ee5bfb262aee55.pdf

  • Size

    71KB

  • MD5

    47891bd75be2b1ea22ee5bfb262aee55

  • SHA1

    9e358aeebd3464e37934918b2a0fefbec290876a

  • SHA256

    14d7a5ba418c1315d9a1ef4424432b2a114200c19b3a688e0f252e1cd7f780e7

  • SHA512

    5d8556b21b14158641b26d88c49eb6594d6fbbb89bede14ab56f661e96ff98b61faab214ad5ebe1aa9ea7ee3c66c28863e32cd5b0bafa5d3adca8e676e83c331

  • SSDEEP

    1536:zhQW/fvFG+vzsNhHLwC43y7Zh7QVn65fT9MtEEAjJdXmHjpW:NQWPFG+vzsNZwr3ydlQVKREK2HI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\47891bd75be2b1ea22ee5bfb262aee55.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    762687aec6d4805ff47475459b7a2d06

    SHA1

    151be0c6e87c383d76b21bd553cf1510c8903ca2

    SHA256

    9428cde8091a96e6b4c5348128aff5dd1fd3f11559ecf26656cc198bc6d2c75d

    SHA512

    5391322ab16a86d01923242b426db9aeeef7ab3f55cd9aedd4a3dbff0c6992b007f22b36961ddd92a80441c9a31765a7f54f3b0bbfb475de0a643c960fa9c490

    Download Submit