Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

documento9030.exe

windows7-x64

1

documento9030.exe

windows10-2004-x64

1

Resubmissions

22/04/2024, 13:22

240422-qmp49scb3z 3

22/04/2024, 13:20

240422-qk3mkscb2t 3

22/01/2024, 15:42

240122-s5pybsacbm 3

16/01/2024, 17:21

240116-vw6ktsfebr 3

Analysis

  • max time kernel
    360s
  • max time network
    366s
  • platform
    windows7_x64
  • resource
    win7-20231215-es
  • resource tags

    arch:x64arch:x86image:win7-20231215-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    22/01/2024, 15:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    documento9030.exe

  • Size

    6.5MB

  • MD5

    5098ffb7635e3b87c1476aea7d24a5bf

  • SHA1

    50fa4755fd48e1b22a718b6a90b46dbead28fcbd

  • SHA256

    55b0247b9b574978a4c9abd19c3bcc04ea78598398b9f8aeb35bd51cbd877576

  • SHA512

    95822f54872cee4b78b3956315bab722e8623a36c3627d9a32a614aeb4b5be2adcf2a88592dc2d05f2fe97c8e9c234062983a6a396bb72a034d0ad0dbc24f40b

  • SSDEEP

    98304:imMbDvtv04eVg5Vy7DzGMoSICiEdefg5SVdO1rjFnW:iJb7df5Q3zr3IREwfa4itn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\documento9030.exe
    "C:\Users\Admin\AppData\Local\Temp\documento9030.exe"
    1⤵
      PID:2216
    • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
      "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\XML-A873ACA2-23AB-FAF0-2475-B316368685F7.pdf"
      1⤵
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2708

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\XML-A873ACA2-23AB-FAF0-2475-B316368685F7.pdf
      Filesize

      1KB

      MD5

      b19273e5b0c35c8f953ca3873144d6e4

      SHA1

      2c3b31216f55ba5d8f094bfde0b294b0c6fa69fd

      SHA256

      d4e75c18d686f7abea9913771a4f84cc03fa2f89cc61a579f0caec78e3277dd8

      SHA512

      a8d4117bd51526a55ddd28675810f8d51fa3140d3273bebde1cd01ffbe8803aad14ea9152847ec83ead9c934a6249849bc7988f1baa8e7b06eae673c325a1726

      Download Submit

    • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
      Filesize

      3KB

      MD5

      e41b6447de5d561caa79e9ca14b19710

      SHA1

      51fa80f295e806ca0d765c79a4d719b439c458a2

      SHA256

      b83619dbee6fc2f7deb40a5265746d9e29c3c60ab21304967300faf8b7a28add

      SHA512

      02e4f9c469894e2b8b5f514b614a72c7eb800dcf4cf3f833175dc7a3ee7f80a6bd123d0d675019f3f55d153dcecf6ecd22156ce8cf7f0a809c1014564a833b99

      Download Submit

    • memory/2216-0-0x0000000000440000-0x0000000000795000-memory.dmp

      Filesize

      3.3MB

      Download

    • memory/2216-4-0x00000000000E0000-0x00000000000E2000-memory.dmp

      Filesize

      8KB

      Download