Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

522e3ba5d6...2f.pdf

windows7-x64

1

522e3ba5d6...2f.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 01:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    522e3ba5d6b5c5820d67aa585492072f.pdf

  • Size

    35KB

  • MD5

    522e3ba5d6b5c5820d67aa585492072f

  • SHA1

    21a4d22912b11060663b746de79d0408a615affe

  • SHA256

    05913eb80323ee5396905e77bae11a28265b4cd54b01e0694be267f6deaab24d

  • SHA512

    a11879d9e1ef6e448ada49c32f0db92ca3a5d5469728bcdf9e69932096cf0b4c9892cd3c1a45ac84c746e3769e5ec2370f81bc75e2f055257c03d6f53822a929

  • SSDEEP

    768:Pz/rGhhsa0awrdsLjGddCfJU+lllRP3Ah:jiuawsyIBUk3k

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\522e3ba5d6b5c5820d67aa585492072f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    434c7d5ccbefde3cefd3cb88d0eafcaa

    SHA1

    9d7ecbe6cc63ca09a152192adf45f8374845e81a

    SHA256

    54929aefb2ed559078d3b6f1c05338a19760f20e2d7e58f67bb1abc9c1954ada

    SHA512

    652158f4b795928ccb9f18a772b3c0f265c86f8eeb8fe93f1ddf26700951ffb3405cdeaf4176a12c651f403a57605fbc2e70418d980ae7d9b844b3f29c5b7e8c

    Download Submit