Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5639cd99f3...6b.pdf

windows7-x64

1

5639cd99f3...6b.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 10:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5639cd99f3bfd5b71ea25843dabae86b.pdf

  • Size

    194KB

  • MD5

    5639cd99f3bfd5b71ea25843dabae86b

  • SHA1

    ac14c84941bee59d2739576216babedb5e8c6c98

  • SHA256

    98684d9029531bcde6c8d79efe3849bf5e8a134c9e586d99ae4d043815ce202b

  • SHA512

    ecd21e4ffe2705c9b620e127cb6be46c0faaebcbe811b049918cf81bd16cb5565e69ca5f4954d092e78ceba1692057110cbf4f56b1d8028d420bb45e6c5be74f

  • SSDEEP

    3072:/VChDUZ3ZzUv9aHOU/+nRghOIAV4VEre0FMbblM3gcLpu9++OQgg5kDPzmgFtmwU:/HJzlu7nRXIAVBK0Fubspv+OPZ15BGj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5639cd99f3bfd5b71ea25843dabae86b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    82c00c86c2966215c4f4c39af93823bd

    SHA1

    67cc790eb0e74468609bfeb0a23b1fd035655073

    SHA256

    3f5af39aa5e7eff26b9a5fd79e487d97de4aa98dbf042023e3d6e9c827bea0b9

    SHA512

    edca1dd940f87533a4592c8cd5b3f9cdfd199497b6199a0f6276cc4826a8ede4c0c6330d49414c1dd9a40b13b8753feab8d5c4337fec5d860fd6834210eb77fa

    Download Submit