Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 11:48

General

  • Target

    507a1d22494f89014d433fa83e0a36df.pdf

  • Size

    45KB

  • MD5

    507a1d22494f89014d433fa83e0a36df

  • SHA1

    fef68f043a564acf55e5a52f373bf84088d1c06b

  • SHA256

    4f5313288ba4d095c35366c6bd9ed92b8d321bea721c0195c2782bb7ad55208a

  • SHA512

    9de61534ef58e15bb7491ed23f84a261ddf95dd9952bde35a4e73a3d922ed26670827afe6ca2a0ce4995b135e34a32d0a5959f51386056abc9ab46045be48976

  • SSDEEP

    768:GsFIHL3JW0BU/bFlmwhnvudnjJw4zCM5/JZZhofhwkznx4Lsh:GaQBWbH5nG3wsJZhopweqIh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\507a1d22494f89014d433fa83e0a36df.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c4bde85fb40785bf16b5aa2d7623b4e2

    SHA1

    a2b7ebb127a5f6e14261a0ce451b57890ffae27a

    SHA256

    7b5d475fdcf7c9cb4aedc2f85deaec289b348decf2f1cfb08df1cd558636e9db

    SHA512

    80e8054bc2d274b5ba9382b4330c1db859c990643c907e13c2fab4c5c2d072324172b35fb1722e91b7afb965ff2b958a3bd09de47efbcb7775c60aabd652b952