Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 09:41

General

  • Target

    5ae9b8fde228487e2459aa8fda098a95.pdf

  • Size

    47KB

  • MD5

    5ae9b8fde228487e2459aa8fda098a95

  • SHA1

    0bc09138da4ccd8471a29bf4c0aade7c26e679b6

  • SHA256

    9f15290643115255507b486152b49cc57a07da09feccd82d0da35e3ed2cf05aa

  • SHA512

    7e07ab86dd401b53313c2761c4a8f2570c5fe574516b14336b097f7d9e1becc5ac5c540a5b0bb8cb4cb4e784b794fd2809c86d75209d82a9f40c9f19d61715f6

  • SSDEEP

    768:iWQy9XjbKqNedVviA2l1PLxvD7fi0BOc6d4T3Y12TJLsPqvHF6/EUZDttMEODIRC:iWQy88UT2LtPWlqTI1kFx96//DlWfMW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5ae9b8fde228487e2459aa8fda098a95.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d3f946715c1985a98e964f8ccb7aa054

    SHA1

    05ad5b29dcfda4541e05317c34f69fafeba58db3

    SHA256

    988eca162db2360b70ed756d5ef5ea579d2b84c360efc33e4251a7e54a5927c9

    SHA512

    9cf5d09bd0a0bf868a3c9f9d0a78ad9f39383da9be77167abcac7785e816130e2fccb878f414c05e3161fae0f749c8193d1814b13141b9d1969f7c712944edc7