Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 21:51

General

  • Target

    54acd46a9dbef03e587c9efde4c0278c.pdf

  • Size

    95KB

  • MD5

    54acd46a9dbef03e587c9efde4c0278c

  • SHA1

    63b7e88b76c83c96310d95c2f8945c6a06e4a7a9

  • SHA256

    03926be9af1bb9f28b8830fcc5caf171e7276a1f0d2d515c5b10b058770d894c

  • SHA512

    72356acfcf7e5f7b8e3bf66ede9d2bae1fcdbe38f1a0d330f89b6e89d555e072fc9e417b9ec7ac64b887a550e9654d12f9c3486f9654b6b405bd664b82f14d7d

  • SSDEEP

    1536:uO6BndalwRw3InhS0+QkPrPHLY4h8fHpbxIWGjWtFCYWJMq0dCQrVjB+skKWUpO5:3mFUAhSzVPHka6HBxIICJF0RjQskl7CI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\54acd46a9dbef03e587c9efde4c0278c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6a83ccda8f7f33790e69faa142657d62

    SHA1

    f9cf3ff083eb39201a3154ed08fda3a123915eab

    SHA256

    2faa4bb43280e02f47805bc70aaf20148a16c8b77548b2da47ba620d4e92eaef

    SHA512

    0c655bc669aa18f21aec65c3234e7dba391d063bffb9501e9173fe38cbb6d06526282a5b88847ee5c3507efc260863e5d1ce846ad031ea626d0f110e1e878a98