Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

4ac6e674b1...d6.pdf

windows7-x64

1

4ac6e674b1...d6.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 07:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4ac6e674b1b59075c4b54720dc7945d6.pdf

  • Size

    42KB

  • MD5

    4ac6e674b1b59075c4b54720dc7945d6

  • SHA1

    c86a53f14a59c23b20c65f295ce87f0cbb594edb

  • SHA256

    24bb3c1e607778952a9b195ac55034ea75df27461f97c81bba9325ccb03ddee0

  • SHA512

    70777107b2a4ed74f27002aad2aff77a158feba824dc862f747fcf75277dd30ad90441e3868c86585340fa9a10c1f58b12e489d9dcdba6ab557d5c116ad077f8

  • SSDEEP

    768:h9o1+my1nwGx/IVLAuA6YxlPecmN0xRndc2ulc3tjGN5e17:k1+m8wLdBQrPFxM2RtjGTg7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4ac6e674b1b59075c4b54720dc7945d6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5f9ed76a9c04506ba75c519972961168

    SHA1

    59bea1db0b062560fdd47933c75817f17a69c39b

    SHA256

    d8322555de343664187dee1820fa5146d86de484ae20c03864239e19608684d3

    SHA512

    c42ab8da86ddf015cffd2deff82f8e610a22855622f4b59bc3451305ad9ea55e25db61a532b6e77dcb2f0b366e21ffb8a5083b77587c39ec2c97d9dd97d65ef8

    Download Submit