Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

592a0bce86...53.pdf

windows7-x64

1

592a0bce86...53.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 16:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    592a0bce8646747ecda0e13c58dcc153.pdf

  • Size

    65KB

  • MD5

    592a0bce8646747ecda0e13c58dcc153

  • SHA1

    206d3175a87fb136144d72d32328e3fedfd2ae4c

  • SHA256

    dfe3b4d2f025393d295a747e56d73457f306f6ade03e9194e4d52fc68287a9c4

  • SHA512

    71254f276a64d2c5449cbfcfd1b88455eb1c6320ad759777bc813408c66f15085a0aa59757cddc81a4328726fde71693e86d2d7aca059f016db9021a44c90704

  • SSDEEP

    1536:jmYfKzrAL36Zr3TzOHJYqP123j1o8aQB7BXvPiRh0gbHsA:ymKXi36FDzOHJYye68amvKYgbn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\592a0bce8646747ecda0e13c58dcc153.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    73faa58437db3e41d621133ffd386674

    SHA1

    afa204dde729d4a6a9632927a54fe11ba0be15bd

    SHA256

    ea10b79c7483d9da7369d5eaeaff85b879eefca9f1dfa955b9559dfea9c20e56

    SHA512

    9dceecd58d03a16013487f56e588556cb0476a64b1144decadf9eb25a2810066862cf2ad9cfaec60c8639e71a1159c457a3d005e91dc3fe65f51b5fb490c1d49

    Download Submit