Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 01:59

General

  • Target

    642f4b07730eb811dc64d64a3a964ccc.pdf

  • Size

    81KB

  • MD5

    642f4b07730eb811dc64d64a3a964ccc

  • SHA1

    50cf01dd01f32f7444c0bb38924c6f97867debcd

  • SHA256

    e8139193b057f95221b38e4ce0f663b7db25d768c6a10d7ff22096b923aece72

  • SHA512

    c7f915092c926d8a9e82da6f49d6dc84e45f67c264c90eba18b8140645d287185a2d8b2f708ec095b800c7cdbbcc0ce791bb6c540f6a33ca1aa90b9a9bfa5a59

  • SSDEEP

    1536:vrOryPbQBN3Vl5UfAHPQ2NzGBc121JsHYbtwN53ajPePW6pOu26WvwvK9CHgmg4s:zpPcB/wfkhKBc1CfbjPeku2dwtAmgv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\642f4b07730eb811dc64d64a3a964ccc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b11339761005c6bf306254714b3a97b6

    SHA1

    4fcc78909edeec7742c11a813c83818810ee90f6

    SHA256

    de464e4b58c53b377214a098826135ddade163f302c515edca65f5ba1d1daf49

    SHA512

    25f70291cee44e7ad3b9d46d6ee1847c68c28884154dfcf2b39ba79f0359bc83708f0c6f67f29730ff8607728ae621be37d291f925d274f3a2c8e59654cf545d