Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 09:06

General

  • Target

    4de87a0e86e9de6e70e58aeeade35e94.pdf

  • Size

    60KB

  • MD5

    4de87a0e86e9de6e70e58aeeade35e94

  • SHA1

    1e4cb23b82b7266d67056df9bd66a855085c5a2f

  • SHA256

    a066086f26217a2dcca15d745a1617982120e51b5646549eff5f4c02b8cabacc

  • SHA512

    ad9e501bd2af34655b45a13fbc6090f79b36a0dffceaae56f2ae3d6f18274cb80e42121cbd0fef0c9dd187e514931ad9c69e7b60dd6b51d2922cc86af3d947af

  • SSDEEP

    1536:ohMIApclny6JcErQsBMA+f9W3z6kk9j/3Ew35BeqE:67y6JcmQp0ekA/3Ew3zu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4de87a0e86e9de6e70e58aeeade35e94.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3c769602ae7bffe600462e173be46d7e

    SHA1

    bc717816ac96c47bc701bab1427d8c949057bf57

    SHA256

    78589137b7a0032f23f46bad21bba57ad827fac0ae3a97ed83530325b2c6e426

    SHA512

    82a2d4ed85af1127e8ad7c0e91ccfa777da84a27e4eb68594089768f058a8810ee21f2dfc18a302cdd949ca65e8cbd0bd2bf2c422302cf2b163fb9ab0d9a7637