Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 10:14

General

  • Target

    50495452d084e6a568be287c82ee4be1.pdf

  • Size

    89KB

  • MD5

    50495452d084e6a568be287c82ee4be1

  • SHA1

    96c45a2f6b337d703fd92f726121441d3ff7d47d

  • SHA256

    2cf9474263aa884a6a3a21a555d48bcd5f0a6239ae60a4aff2f5176c295ff8f0

  • SHA512

    c11933e673d4c3ab04a5b6a2f1b54e8ae44088d1d2638bf646332eea4942c4726b12e2b51c55095db98cc49748f60a30adea16e741f5b9fba0b6f05a4b313094

  • SSDEEP

    1536:Z5PvSZVZLMY2j7ZwCTAaEsI8C1dGAkm0sdvlO9GlsuiGl82tWt6zwJmy+AHmW8p1:jvSZVBB8wCTAaJGdGr9qvl1OQlEAy+oM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\50495452d084e6a568be287c82ee4be1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8e340e8abfbdec153f0c561a8522f3ae

    SHA1

    7aa093e1790bf34d30bf875d16da0c25c4ca0b62

    SHA256

    408658270413c6b940f1bc5468e9505bbf20727ec98956b5588372ec538f2be7

    SHA512

    8872cbfdc18dd2f995096644dee138982df3438d22a6631f2c9ed284a92d7fed4c92444d8c06b57b05e9a9fd94c5ce1b24f8368c364e068b5bab4481542fa780