Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

65789ba8e6...37.pdf

windows7-x64

1

65789ba8e6...37.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 16:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    65789ba8e63879f06d80588e01e5a037.pdf

  • Size

    132KB

  • MD5

    65789ba8e63879f06d80588e01e5a037

  • SHA1

    4b12edbab406650bad0686abb6a796b592d480ef

  • SHA256

    655f2487bd4956330d7adf14d34a4ade454095abb95d556fbf28af30770e54b2

  • SHA512

    5021a67031df0e5007a25f6f1b3e9d65ae7d015587942b939d76f13b66bf74b5f7ccfc318d8187e9c5ef7eb7b9f51be9e9eb65cc8cd3a5bd77cfb78072416d3f

  • SSDEEP

    3072:2+kkCYPJ1YT9w94TDz/D1JrLYmAz/QKaIQsR/qP+:LV3X6TDDXrEmADQKCP+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65789ba8e63879f06d80588e01e5a037.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    66856ff1b9cc809ef4eedd96463f9692

    SHA1

    2789b9723d169e81c53e7f3488e5f852f01d3cf9

    SHA256

    b4df917d61eba6219591b301d45b644ee4ff9bfb83f4faa83e50b13e5e29cd96

    SHA512

    afdc5ab849ac1f1170038e47962bb8bd5f4e627628e3e4529a616d4d5ce0b3e0f9e61b789834668d2215957fb98c6808ad68eb1a02ceedc46db2654251bdda5b

    Download Submit