Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    17/01/2024, 19:52

General

  • Target

    637519b1f8b19f7f8d27cd3cbb2718cf.pdf

  • Size

    86KB

  • MD5

    637519b1f8b19f7f8d27cd3cbb2718cf

  • SHA1

    e5813e6debf536ceabbc63436c6eb4671ba3103c

  • SHA256

    457aa67e04d80ce3f5eab19fec3e0b257168a90a7b751c312d12a0b4ac15dda1

  • SHA512

    35e78107710e873c7e68ba12e6a61e9434815be3a7873f44291ea79f4fdc87a9f712b538dd9b29ee20ad9198b4f4b8c56e9aa4a27f5e4745b689a9ad12615d7f

  • SSDEEP

    1536:dxrEvTnyCvr1R/MKxW3aKoifiDmIs7Y++pnW7wqKn38VXZLgW6pOu29eiMAv8F:zEv/D1RMWsiDmIgY++UAn38PLJu2cinO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\637519b1f8b19f7f8d27cd3cbb2718cf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1af1bf23151119848011f787af6b0ee5

    SHA1

    d088f4957103c0c9d6cd01bdccce02ce893324e3

    SHA256

    2a1aed9a9102ef17d26eae01bd5b487f2e68e0e3b6694089c311bc9f0fb742a3

    SHA512

    8749a8dad62d852243f4db0f398963738dbd0c028912718f9e3ae76990bf131e9288b124fe6db79d5c7c182a7f02edff4b8d9d1e2066aed36081cc3b9d6a0b12