Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    229s
  • max time network
    163s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 17:52

General

  • Target

    51375c6158c5c2f45446f5fb4bdac894.pdf

  • Size

    88KB

  • MD5

    51375c6158c5c2f45446f5fb4bdac894

  • SHA1

    9aac91e4cf1f05197301d77b522f043f0427de32

  • SHA256

    be9b8907d35a31dfa268042748293cbb79ccc7f64667779895a482521da8930b

  • SHA512

    c54f8969ac84126b7c384f9d7e2a600d7822d36115aeb77199b829e22e813d1a0548cea156ae39872add42071e95590aa5ed77d34f392c9faeb167a97c8c4b78

  • SSDEEP

    1536:gz5PIvIN7GsTydSeB/1bGnxymcINe/3CfMw0G62spJtOvrAOzWOpOwrKWcdPEY4v:SPI+7Ga5eRmcINeaMggJEvrAOQwr8Ejv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\51375c6158c5c2f45446f5fb4bdac894.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cdd61618c1dcc2b1f89c21fc961121eb

    SHA1

    6de795955fe8bafc4621a87e711b51ff7b5eeb54

    SHA256

    0394828cf1197c8835394705b5002ac94bf32f71010fece5e4c1876f99c18456

    SHA512

    13a13c6b99da791b7300d3ad74d81d9b5e8a9c28ccfadc77a3d5cbae2102daf3c49103687c9e137514b13e2f3ac5f1c97a7a299202c1af32e74ca80cab9b93fb