Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 00:44

General

  • Target

    6675e74d07d89a540540d5249a629f39.pdf

  • Size

    78KB

  • MD5

    6675e74d07d89a540540d5249a629f39

  • SHA1

    361d303dbb806f897ac744ed049dc52dd488e614

  • SHA256

    2db2ca2e7e7d329656a2eaf80655b057556cb6e3d024d417fea14324e604e79b

  • SHA512

    b4f08b489eac42a4897ffb02a8c267e7bec2bfbc16be7656c12cc8d42c5666ae473c4f184fdd2a6cd4c571199eff67915e3c73300f4eb29baccc0929e41c3c77

  • SSDEEP

    1536:exyo2L0rdHHrgs/2qjQ48n4RfsPzlzW8pO73WzXyilEllE55:vL0rdx78nUsPzle7oX5OlG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6675e74d07d89a540540d5249a629f39.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8c6962d12f7495947619023f390151af

    SHA1

    d6485399b1fc3aadf2b4d07205d7aff0f2fea5ac

    SHA256

    0c8f7298afc1f9cc0095352f6321ca0b0eeefa1b2c5dd73f26087e60f88c90a2

    SHA512

    2fd458a846c949fb4023930708da09947cb094ab3ccd9d5800be05f5ce89f2431f0216bcb070143a22aa04f6c7045ca1df1a45b6b7eb77f29ebdaeeae59fd1ad