Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

665945a158...24.pdf

windows7-x64

1

665945a158...24.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 23:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    665945a1589e3c62182afb678706f924.pdf

  • Size

    35KB

  • MD5

    665945a1589e3c62182afb678706f924

  • SHA1

    970fec942189bf18f3c85e2016581ae088267bb3

  • SHA256

    ed8eeb992d4fc734c80586be134b4596d1cac467fab960cec85e4593088c7752

  • SHA512

    893ebf5d7967bbd290f18f9a5279962a0277e2b53d69d974819d1a12e48d399666cf2e5a57e714820862d358b033efda5b9ffe49413d2ab3330ebb73de10393a

  • SSDEEP

    768:aTnRr313LsaOMpkM8rXYa45mzXVQjrhbtEMlll53986l:snRJ3bRGX4gLOrrEwq6l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\665945a1589e3c62182afb678706f924.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    fe770e2cd57d054b58c882e42644c113

    SHA1

    3bb872339291dcf3ba06bed9276684a2e3574d17

    SHA256

    4e88b28a2b9f212b0c461811051f85db10a466544adc2d8f40abe29192e48d08

    SHA512

    5a0edb44659e790ec6e88e6386094ca6d49a1ffb3b843e555dae9d8c0764ccff0f4b92b7193d398a9da57a962bfe8cdb56eca03737c872c4ba75beb654281c2e

    Download Submit