Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

54793b56d2...97.pdf

windows7-x64

1

54793b56d2...97.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    110s
  • max time network
    32s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 20:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    54793b56d2e39e90a67bd0e37bcb8d97.pdf

  • Size

    87KB

  • MD5

    54793b56d2e39e90a67bd0e37bcb8d97

  • SHA1

    f113a8a04b27f02b331f7a13fef50bfa37a980c5

  • SHA256

    a96fe9fa489c0e29f2157258bef3d0adfca3540f224458c4288fa7185626159b

  • SHA512

    f690f47c6106d3c0ee3f90c3248eb555e73a510ed1c4fa5e8b43676e8afd3afcbd57544a2fdea2327b32f4517a9fc2e3ab206d23358e6ebf6d87f17764e6eb7f

  • SSDEEP

    1536:Sd2u7/ZFrsf9KO8Ei+g42L44Sx/IAZlwXoL6MWLF383p+A+jW6pOu2FHzfwh+hEB:yfFrvRXP7Sx/VuXPfA4zou2lfwhkU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\54793b56d2e39e90a67bd0e37bcb8d97.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a9646a7ad866bd0ce1dfa3a5424220ff

    SHA1

    c8ad955ee4642e7d5650e6ce33aef9cb1f5f0de6

    SHA256

    4619dcfd2e06761d3e2da1d103aef779f23c89131ce4e81032e2d5ad33d4eae4

    SHA512

    9252a557f2b3bf5bcd8af8b2454bf732b0dd544e7fd85a574a7e8ee7cdc7321429e685efcf85da46749daa0289545da6c2ff535788bf14d64ade15abd135bba4

    Download Submit