Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5365c85d22...a1.pdf

windows7-x64

1

5365c85d22...a1.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 11:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5365c85d22143bc51dc5cd47e5d73ba1.pdf

  • Size

    78KB

  • MD5

    5365c85d22143bc51dc5cd47e5d73ba1

  • SHA1

    d2648404915807b8a53d2d85c0b20cf5d6c61a54

  • SHA256

    23af95aa70dbc6670c69ef0eb0d48bf573f955017b20328cfffaffc32fba0620

  • SHA512

    9797b217a5432209027d6c0d0518ee96d950615b5bb26a29a7dcc3febef041a8af064505e1be7efa11c3129c19cf93d4b9d9c78fd47bbc2294261728dcc85339

  • SSDEEP

    1536:eF2/WJLDApbQVaB6RU+fPAF4SPDLMLMDWr7JTUx4WnQP6lW8pO7bqc:7WNDibQVaB6RU+q4SrLIUxJE6k75

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5365c85d22143bc51dc5cd47e5d73ba1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    54590145ba1890028fc4f479b67adf09

    SHA1

    41a7b2932a59f0f389a9610af1a4cddb1d3ed388

    SHA256

    a55c6f7c385b1a542fb57c05c92f701a0ee7e1b4d799ed6aaaf81114f0fcc18f

    SHA512

    0696851ddb510510169e281b61301d379fda71e24442271e0fe99e4dd97a7e8f6887ce7a74dd871fff3f574cc08d8c189fc8b5e7eff3c8be27b086bf199ba57b

    Download Submit