Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5b0857e0ed...c6.pdf

windows7-x64

1

5b0857e0ed...c6.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 10:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5b0857e0ed115b76abd7f8cd3ada40c6.pdf

  • Size

    83KB

  • MD5

    5b0857e0ed115b76abd7f8cd3ada40c6

  • SHA1

    24284adee85a84ad35949aad566d24fa98486aa8

  • SHA256

    01aa8d1aa62d2a3961a1ee2ec2e78723cf3fa8dc175f66ec3f9b710e3346108f

  • SHA512

    bbb263a597206355a966b0d238e1ba8ec51b9afe74ffad46dbfe5c3ad03bdff8b05ae16b4479a3594871db40351b0d3bebe765eff84ea9745431e286a8756f1d

  • SSDEEP

    1536:9Vbd6I3i0nuGuhabYWlrlhIacwBBUQ8MOxf61L2qWGpOKCW88O37CB/gMpr1xr:HpuG2ahl3G098hksKa8Oc/R17

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b0857e0ed115b76abd7f8cd3ada40c6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    04860c5074a0ef0cd57bd2b0725967ca

    SHA1

    d2466dc6df63665734e25139b70bca931a17b017

    SHA256

    e8ecebc6ca85e72a6d8625c8e243cfd9c70801c560a568407c67a35378b654a4

    SHA512

    6bf9786aa8cc4da75898c0834ea4f756578a3c3390661699f0e2d021b9d714d6a93503cd5e796474d8cc4fd1dbae44f46e2a2724aaef80770cf96e27083cca85

    Download Submit