Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5b15e5e43a...ef.pdf

windows7-x64

1

5b15e5e43a...ef.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 11:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5b15e5e43af72f92820a866ba55687ef.pdf

  • Size

    32KB

  • MD5

    5b15e5e43af72f92820a866ba55687ef

  • SHA1

    d70fd256163405b942da7c8c4728b34e130053e9

  • SHA256

    374f559f2627f64a47b096d012b358643926265c53661360b42f0e3edc236118

  • SHA512

    d7f7d170ccdcab912d3878f2a40f48220d3e47215cafb804a948a4802e9265c4b38bf594f81d3f7f0340b6992b447d73abb6d2fe386877e497554955e1a43040

  • SSDEEP

    768:K0wjIkfZ56+b+ypK8VGdAPyOTLeh6GZVX2tCgO/X:wEo5J5Py0LerX0CgsX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b15e5e43af72f92820a866ba55687ef.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    919ea81165747c7c254d1d67261245b9

    SHA1

    81fc92d0db13333360e174f9792d01dbd83313b1

    SHA256

    73dcefd0ef1d64ea6e1fa382afebf3e64993b7dc3ca478bbbe20a8586d7fe616

    SHA512

    afab5c6eb52e347d96edeafc1db062027da13f32bea39c2431aae348ec8c5a915a9e8a508c9e6ba5ad89443a74f508e6a858000e9c2d2fadacdf8736e123a332

    Download Submit