Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 00:03

General

  • Target

    4cce305a22e778c37386949189169ad4.pdf

  • Size

    95KB

  • MD5

    4cce305a22e778c37386949189169ad4

  • SHA1

    900053738bcf7c3de5b16a985472216a0352782f

  • SHA256

    86682f9e9bf3ae6d0f15bb1aa28ac5be5ca3ccec9adc63172c99050cf15e6255

  • SHA512

    55e492ea039880f62bb9c09d07c09d62913c7f488ed767ae9f5082a9f3b8c989c44c917e2ec95a181fb33b299a0a0dbb00f8e6b7f6bbcd314adbdd38d85a0f94

  • SSDEEP

    1536:6Ws41q610lptsDM7Hf6+jT77lbqHCK+D82dYIPctFWypOlLF/aZ66WX7Nx0f3cq+:PzV10lxHy+Bwz2COlLF/aEPx0f3F+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cce305a22e778c37386949189169ad4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d230731b436c32e0801952bfb5850e02

    SHA1

    6baa02a7186642a4af02db80a6f19072ea7c7f1c

    SHA256

    02382c87645b23e172c75a384225d5fa9a2fc7e346d827acde1f32436f40e39e

    SHA512

    645d088870d0abdd1586230e009f067a4b5e4223adb7c8062b9ca6cd7a4b3584fb3a88115bb802f9181f7816f8e3bbfd63f85c7d1e38add4781e954b4a83dc30