Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

749f541a7d...20.pdf

windows7-x64

1

749f541a7d...20.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 11:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    749f541a7dba8cdf286acd42b983f220.pdf

  • Size

    49KB

  • MD5

    749f541a7dba8cdf286acd42b983f220

  • SHA1

    5901982f2906353b65e749b9cdd71195ddbe0695

  • SHA256

    5faf7517e6b132ac72a5cd14ec81be1786674371cef447e2065713b3fee6b595

  • SHA512

    8e6426a19d3ddc3a9f02d0c2eabe90ce348c86cb066ab89b7fc0bdabf6f2026c6cb03a0d6f2e9ba7ddb7106a63efa98c8f024a770474c26192a2263f5ddab076

  • SSDEEP

    768:vzeiDBwpYHQoyfikgj5Boy4SQcZwWompPjB8t5FDJw4ayAe3Rl:vNBBwo7jYSQ+no8PjB8jJJw4ak3Rl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\749f541a7dba8cdf286acd42b983f220.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8bcbded0865dc2cc33576bb2cc95838a

    SHA1

    0903fbb9abdd48c91abdf906bd73f808c78c8fbc

    SHA256

    3ebfb7acebd8a82f0696b2930824d6ee3be59f6937084e2ab97348268c743b1e

    SHA512

    c802cff9e1c8945f622627401be1a2cfd62de2ed22c98345906b42f8d655cca4a103d2d793a0df77a2ddbff1af4654e94524498d25f8fa55aa289bfe8cdb9797

    Download Submit