Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

70f5a898f4...6c.pdf

windows7-x64

1

70f5a898f4...6c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 00:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    70f5a898f497fbd069d7d3283f60bc6c.pdf

  • Size

    50KB

  • MD5

    70f5a898f497fbd069d7d3283f60bc6c

  • SHA1

    e368b246845339562916f48a2d99715e310a0719

  • SHA256

    67ee201a29b95d88f57252ac7f51f4a717f68fa7caedfafcb75ac518ebec7312

  • SHA512

    2997425f6ccb8a9be24525a9bf1de8382ef0ff4d0c59647c78c576c9b7455a28ce538294d219ee8714eac6acbebc52dad7a7ae038b6b11c1d9aee2c4b354d50e

  • SSDEEP

    1536:YsS8MOhf/dejSQVAXFR/bhDOGdgRYFCwEWTa2h:8bWf/dgSQVkH/tDjgMCwEW+2h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\70f5a898f497fbd069d7d3283f60bc6c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1a9eeeba51e517d624ab7d0fbd0d54c9

    SHA1

    4204ff05587d901799fd35fbf9a2e3400e0fa9c1

    SHA256

    7673c90ad7dc01f8f106a7f637fba69fe3543dff392034fd6f7e4fc8e8b5db0a

    SHA512

    a60712ef57a09196d0cee1844a49704d0da021ec1d70bd35dcae84124093eed3f9dc5f0d2c8cef39541c5c38d686b44cd4a84c427c3b7b14d8c6aca07047c63f

    Download Submit