Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 23:18

General

  • Target

    70d1b32a3081cf0b072390a924034e20.pdf

  • Size

    71KB

  • MD5

    70d1b32a3081cf0b072390a924034e20

  • SHA1

    f51827183ff2945228427a0403a79e895a254d27

  • SHA256

    032efa0b52a3351ff58dab81cfbb6af0421411e5c817e17a7aa2c4d8e96115eb

  • SHA512

    29dec95307b96b922643b931a93ad8860f67b6f489e59b64f8ee450b6864c34c72dae6d63452aea0ed0a0b6b065e8681f88cf1cfa45a13ee5427d10c66d4647a

  • SSDEEP

    1536:bUl34UrZf8PvMMKDDbdw898VNmP69WkNpOPsZojW6SOI2e+Yvxjdl:QtjZf8PHKDDbKZfmP6mPsZoxI2NY5X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\70d1b32a3081cf0b072390a924034e20.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4a9da216b13145e0f3aa9d21829608ef

    SHA1

    7dd66611524635f52af45376eeb2448a91fccab9

    SHA256

    b247c09b78397eeea16eed1d3a03220959e516d81ad13d30f027010998ef30f8

    SHA512

    fe9863c6ac218acd8486e8909ba6fdad82f1e198c9b671a32a042ee7a91e9b1d7d100b11a80eaf1896ec84f7b12a898b5720e59d981ca6d4e927ae83e1264445