Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5c17a974f8...1e.pdf

windows7-x64

1

5c17a974f8...1e.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    15/01/2024, 04:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5c17a974f8035a034ff53a92d735551e.pdf

  • Size

    86KB

  • MD5

    5c17a974f8035a034ff53a92d735551e

  • SHA1

    cf5859f8c16697b56bbf6dab5fc88c50fe92d9b0

  • SHA256

    1e6ab65e68f32798c8d5a3925821133a98a01286765d914175834d79349549f9

  • SHA512

    fcfc86cd93eb43e8cfe7094134eda3b1f5732e20ad1620c9b7827cc4fed319a8d0deb2f035adbcca8118d3b4bcfdc7667eb7379888eb9461d5c2e44622a79f1b

  • SSDEEP

    1536:epA20abU54v5vLnsYVywcUIZ5y8qGIcdu9WspOL4WKj8qepXqzyhg:8A20svLnewc/G8lIcLqNepXqzp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c17a974f8035a034ff53a92d735551e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9d1cefc63f960794d96f0be66056a099

    SHA1

    13ddf31fb84bd4f98040dcad5dd6f04e7a8595f9

    SHA256

    b01c408fd4bba5181ab37a796750a1d314730fb7a606d4ce2f6957857546b5c6

    SHA512

    25d68f3ad98f7f067a4b02196ba30b1bc978e1755936e9f38e0c6d699143cac5a75cd7628d4279b119773703dc37c455d120bb5b35d71370a7965dd24f947b73

    Download Submit