Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5bad3035a2...2c.pdf

windows7-x64

1

5bad3035a2...2c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    15/01/2024, 00:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5bad3035a2ac702072b9f1a2d01cac2c.pdf

  • Size

    104KB

  • MD5

    5bad3035a2ac702072b9f1a2d01cac2c

  • SHA1

    28cf2ef5530a09b3ddb2f1f7c80b8b3228c721a3

  • SHA256

    10ad66d9b9714c694f400c919cb94a5f88d57eeaefd2bbad336fd7d93cb95679

  • SHA512

    31af61b52f554d4639ba64f666c5bed8b552f3d6abe581fd4c1e741ee7916865889105b3694bba2c54ecb4807f88d24561c24761e961e89b531d8e6877bc5360

  • SSDEEP

    3072:d/xOdUwVCIC/1oeHneqyKJVc8HxtQbzIfF51:dId4/1/HexMVbHGzij

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bad3035a2ac702072b9f1a2d01cac2c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d006bb36bb44e2ffd6233e5c5b0a94ba

    SHA1

    0f7b0f4b9f5159dac16bfb7b0dcd6e9aa59ff02c

    SHA256

    53c07f798e2ad00005af02090d30b238205d34ab7390e7ee97abe4b7f1e738ea

    SHA512

    accb1c563ec2f7358f75994da1d5720d70b63c7dd1fed9557f76aec4d3f5e684e54ac9099f25693a75e5051813307f9778b76f6f1619010b1036c703e6f346d1

    Download Submit