Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 15:34

General

  • Target

    56d7363f621856732ce79890d712750c.pdf

  • Size

    73KB

  • MD5

    56d7363f621856732ce79890d712750c

  • SHA1

    e32afd7c9cd35f196877ddd3382538f0fb841a6c

  • SHA256

    b81695cf53d550d388441f10ed34dd4d1d132905e734e2c5ba3c01bbfa8d84e0

  • SHA512

    62c93b7a8eff572206d34b6ecd04827b832bb95add28e38fdc93a1d6815c6980630be5c9f63b01fc32ef81413068496f2d9cef302841733f3d4835f1b4a5834d

  • SSDEEP

    1536:ThmlN8Q95IwNLuLrRcldRNVRZ0gBs9CPLdGglkWipOPhWRkTqkC3qElGTWLirtG9:dm5IU2rRcl7NV70WPLDPdTqDqnSiA9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\56d7363f621856732ce79890d712750c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2cfa640ce295f47a0abce4f8b5ecf11d

    SHA1

    1c9a6f24e349b97d4afd31c799268b0b4bc31785

    SHA256

    7abf29b84dfb477f49ed68699200646d8af938aea8298404e78a8d2596d33608

    SHA512

    e05795f3004422fe5e202ae712f30276e4250f1fb728e2da4a66e6408b283a1908aaae830d7d85c7c754357be820bdeef66ab2605347265f3a0a2d7f4e084244