Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08/01/2024, 14:28

General

  • Target

    4baee5cf04ce693a0db55822b3b21c65.pdf

  • Size

    103KB

  • MD5

    4baee5cf04ce693a0db55822b3b21c65

  • SHA1

    8503d495db04f3a9b613df6565ca32ac6c078704

  • SHA256

    898016d99dfa66e1e15e9d1351eaef535cb5273c5b2e381931a0a7f350d0ea29

  • SHA512

    9cf327e9aff46efb539fdce8623ea965f1bf8a0f0d15b5c9a00157b643f3e9e27745f03eb7702c740668ced765b311a412c0dcb4ff23b69d78b7333549276a03

  • SSDEEP

    1536:aMDmBNqO7JD1z/n62J0xMlV+NuwX/Y68oD6RQFwBiBAWGpOKIDJrVSWAs1hmE8:lDAqMD162Cx44NdPN8VB0KeJrVD1hM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4baee5cf04ce693a0db55822b3b21c65.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6c0530780c682369519dbf2dc334734c

    SHA1

    a4c758206986c52f797a4ce2ea793f397dd4e672

    SHA256

    63792a68317291e29738b71d2e6e3174df76de54a7a2af3c3d9145af63136c92

    SHA512

    e4311da64116da024d6c45462d7cfcc12a168d5e88d6987494d2166aa4d39bd09bcd998e99f1cd4a67ceed2d3790eec0047b0651704ac4277b6646f0d10a4fc4