Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 22:31

General

  • Target

    75ac41e1e3ded5856f3c8a5edc257e74.pdf

  • Size

    85KB

  • MD5

    75ac41e1e3ded5856f3c8a5edc257e74

  • SHA1

    3766590849366698d4b364b283359062e8d2bf62

  • SHA256

    d3f213731f35c1011ace9cb12fd65fd4f27aa96b11eb07a2d882148b1d906a31

  • SHA512

    65a0cb47c8c82cb035fd21344d7e0fe8bb36a51f8a50b1f6b16332eba9787089d00a5bb9eef8f3efcd107867a9f1c87792d06656b682c7aab1f54e13b658d9cb

  • SSDEEP

    1536:38QlEGTXtspOzRmZcy2EeGEbStBdBkjTQzoWHpOv1eG36WMyYi5pPdR97pYvI:sQlEGTXaYRmZUTbukSQv1eG3hY4pr97Z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\75ac41e1e3ded5856f3c8a5edc257e74.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e4d2c9adfcc44fca75ca9e2f7f3f532d

    SHA1

    ff0c3b75bc42d304bf4254cf31a0ef78ddf2167b

    SHA256

    85fde72f36203dc2d2608a97971097e797fc5429f7a2d78bb1820f7985002976

    SHA512

    f7bbfd85246dd7dbd00ecd44b24d11b454e4939833902cbe67162bc13a891557ecfc190c7a35d7ae224a5523bdc80bba177af5ac9399f24c1e48090702cf173d