Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

580380767f...d4.pdf

windows7-x64

1

580380767f...d4.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 04:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    580380767fc4a7f30ba35eb06291c9d4.pdf

  • Size

    87KB

  • MD5

    580380767fc4a7f30ba35eb06291c9d4

  • SHA1

    439e05636766a7cc326d47a0ec7745ed9d4a53a4

  • SHA256

    5b9f28c5b6e7c5d4c148dbaea9c0f80823fd7e303951e39baaef7a4490fcbc26

  • SHA512

    0b50a96a2c39ed0f666b7566fa5d4bc94f4ee3fc0c08a74d3f3dab225a13ff6ac9df3a6918c91757bd1f8e0ce1e38bd4a1f735bf68479e06395e505ffc45121d

  • SSDEEP

    1536:5vbUJgipqqvowLI7TbQroT5knIg5WQ9Z8PQVBWHpOvTWfkr+crIU87QL+:JUJgfcn2bOoTWnIgJ8+/vDCcEU87R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\580380767fc4a7f30ba35eb06291c9d4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6302494ea6fdbe8345ace59e8d5daad3

    SHA1

    ccb2f160e199e6c3cc10f4acc3f8c06f181be431

    SHA256

    1085c84018bd647178396937e82ef5df273e6663e8b11c0fa4bbbc7a3f1beab1

    SHA512

    93ee99855219bcf9d33f158512539f6ab707ebcd0c3ea106b951b5e714f7ab1dedb431398b09bcf3109d38f6f2c18d3a980a006f539900d825fbb370ce4af36d

    Download Submit