Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5c17682a77...2a.pdf

windows7-x64

1

5c17682a77...2a.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    15/01/2024, 04:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5c17682a77b2ff6d35552926ac63b12a.pdf

  • Size

    39KB

  • MD5

    5c17682a77b2ff6d35552926ac63b12a

  • SHA1

    e5a5ed2bdde0dd6e69b99c6751e5dc78f7f1b5ee

  • SHA256

    95f601d31856ce9af50447b73288c1719172e04f7beff2b2eea39693fcc64837

  • SHA512

    5bd7d164a6e451c61764159506486719ed79388f4e71bdb31761461500220c8319cf3aca6fa10ef2e569126821b7f1e1bf0ca3930032cc6b4625abd42d5503a0

  • SSDEEP

    768:NqMgGzpDwp9l5XwEllwBx4RXNAtF43iH1dyulPuIagYS2pC:gGFkph+4NNAF46JVuOYS2pC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c17682a77b2ff6d35552926ac63b12a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2bbcacb6f591be2c3c816d6ddf9754ba

    SHA1

    46e95b6678644694448f7a9c1db778fe478bf4c5

    SHA256

    7bc6d9a07dfc9f982a759c268de14ea2763b5d6d0f83928a3d880dd8a534a607

    SHA512

    cf012f15ddf303f297aed2ea424f3ea3092c8b390630847f868aaec561192248ef54d694cbc47c258bc1da1e96966616a712308c363e0a152b6a9509fed49040

    Download Submit