Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

54c8ba2f61...56.pdf

windows7-x64

1

54c8ba2f61...56.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 22:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    54c8ba2f616155591ad029ced1716c56.pdf

  • Size

    80KB

  • MD5

    54c8ba2f616155591ad029ced1716c56

  • SHA1

    b4b1ede4fbf6507e23a28733deef29b80e25531d

  • SHA256

    b6331864b17ba4d77a9f1c0829adb2d5d4416c5086d7d99ddb5360ad95569e0e

  • SHA512

    b44c71f4731c702f2553a8d050123f6e9bcb2094eff21e1a8572c72bd8819651733504c6701ee9056c663909792c44ff22aef993a0f808dba75cf7f6e7836660

  • SSDEEP

    1536:8YduC4dURumYOk9gQZ9E4MMvE2HEEdahGHXxo6UxG8MWlJOv2Kl:rf4d8umK9gQ502HEEMKxo6N8hJOx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\54c8ba2f616155591ad029ced1716c56.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    92a650cc98a90cd290d1864c133f4602

    SHA1

    8648c8fc7dd40e8530ffa2b2e8873987437b7384

    SHA256

    dfebf20b9227b438af16ff589eb4048798a2c625eec30c1cf27bc78f2a8e0ea9

    SHA512

    f4d0c43b6cd2a157d8fdb94a7e78b01c01f6eba8983addcbc1beb36c4a10662a348e13bac6e4ea3526d5a8d0135edb2c33e3784c30c9ee9a8e9a2525f569b1cf

    Download Submit