Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

21/01/2025, 11:24 UTC

250121-nh1zvs1qak 10

10/01/2024, 21:28 UTC

240110-1ba63sgfdp 10

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 21:28 UTC

General

  • Target

    163.5.169.28/SCAN-atoletter2.pdf

  • Size

    168KB

  • MD5

    94667972ade0e377d8edd7f16730a0db

  • SHA1

    7e097e209bfcef8f11ff319fc5d2953fa436875b

  • SHA256

    3d29d9e8dd685c045d594a530a29c873b9d6c1957e9616675a0087746d592fa9

  • SHA512

    83fbf17fcf72f023f71a68583acdfcd65eeb8702c09f90d10af6e284eb400ce49802a3d26492e6cddc2406aadfdc1f6d14f01c7fc6498b6d2b836f60c81d3d67

  • SSDEEP

    3072:9pAXRLFm5rv1Wqu9r1RRbgz/hdcJ0XWLtSvi6dzRov5dMWv4yqF:+RLF8Bux5grI9c6DTMPyi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\163.5.169.28\SCAN-atoletter2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bd26841af657481477944fe69983958d

    SHA1

    03a412f786c09e01736dc5877e094941924cc405

    SHA256

    a5af213c68f0c256d6f0af157423996489c127ff9bf6d577c7647eb1739f002a

    SHA512

    8a7d54c151cc2da1e3da45f652f67f795578cf666edefc0f70133723aa0cc76b8b0c71a69daf9fa8bd52dc9ae40f0baaca0d7babdd857f742b311ee7f6c9572f

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.