Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 17:21

General

  • Target

    68334f170e3ccfdd5c65fcf805e2ad33.pdf

  • Size

    86KB

  • MD5

    68334f170e3ccfdd5c65fcf805e2ad33

  • SHA1

    896fa8522e3d69db8f42da7e47f266b5ddcb9276

  • SHA256

    7570f3b1ced6d01a3a98ab8216181b0c7441637be069052dd2e15aabc3c5952a

  • SHA512

    4ff4e8968a37fa5956318f5c096a390fb07adcbdf6d1365946d012cf958dfa749ce55f9bd80de0baf18d5a521a02ed7989fcb8f60862f0028c9caa80817680ba

  • SSDEEP

    1536:adWMfgC1epy1VN/NCqKhzothSnHKuES6/Qj+BjvWEna/PWfO48WxApOG4GTM9/:2WMfgCeg1VfCqKhzYSHCS64aBjNa3QO2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68334f170e3ccfdd5c65fcf805e2ad33.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f5d2287023b03196ce90c02399c1d5b8

    SHA1

    2b6204232f4a9380a2415031307b867e0470afd5

    SHA256

    ad6e9798b7f990505e6de6664cb52818a86e5ca64739d2b97a462a1adc904b3f

    SHA512

    28e104eb53c6bf4283e91a661286771d3ee673f3b832eb0252f6cb6c19e2d5441538e365259d097c2db3d4e72ee07291bd19d03bd5ef77b7ffd3eca681819df5