Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 01:03

General

  • Target

    5510a273c056de5f7f78a99b8b045b45.pdf

  • Size

    81KB

  • MD5

    5510a273c056de5f7f78a99b8b045b45

  • SHA1

    538679bd03da2ea0a0d7bda52ca6b53478ec0920

  • SHA256

    7162a47e24e5dedece017bdeda6bfd2f3f2d52fc0d4cc03c716f507b0c1cc58f

  • SHA512

    641fd7a1b7488f864014d69fd2b8409386357744f830c2565986fbd109184ea291588bd00bcf7200936093e4078b3f7028675c578f8be37dabca16f67fa1b600

  • SSDEEP

    1536:CjikyrhfHkDxVT5pa5mEDoFdF7NbKC0SuxdQuUH0YQmpGZ8auy8WcufmpXs:ei5/YTzY9oFdHbKCWxdtUH0upGZ8jQc8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5510a273c056de5f7f78a99b8b045b45.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    604105d03ec3ecdc3e41693c52c3d86d

    SHA1

    c2963fa5b62f862c6312adccbc8e5da3785e3115

    SHA256

    3867d42c7ca54a2d06fd8d68c965208fa408914061506810593283cf6e7f006f

    SHA512

    86a9113363a736f50a0326f69f5b4e474189b772c43b23b2ee21cb88c8bc3236690b00934d2fa700dde21e6a846b191858b9fea3d1eccd8c7634be6be2d6e857