Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

777990ecd9...55.pdf

windows7-x64

1

777990ecd9...55.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2024, 13:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    777990ecd96a1f5f9449758ee9ecf455.pdf

  • Size

    48KB

  • MD5

    777990ecd96a1f5f9449758ee9ecf455

  • SHA1

    6a2d79f758527acc2018e0b9a418501b178fc9fa

  • SHA256

    6a0cfd135c5d507da7f6100f3e4f031362c4e57a8c17a156b8ee22b1a3346dd2

  • SHA512

    466f8604dcf16420376bcff3a0eb3758e39639ae1fff79e0c18efa5ee997af349c1c74766d1d8afcc9ccc7a0490e8269a8409ddf86e9fc4ac3f0304f3e92d7ea

  • SSDEEP

    768:qQIjzxjGsUnvPtE0lMfi9GIYSaTudA/mbRxSxyHk0m7B1NH6C0C:RIj+vPt3UuaTudAERh47B1Iu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\777990ecd96a1f5f9449758ee9ecf455.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d2782db9b475ce27fbbf0931743b8dde

    SHA1

    e27efc6c7710eb5c7466fc85682b665c3958319d

    SHA256

    d4ad4e7ac45eba74177a0c216f30b69b2ebc713d0a7bef71815c4a7f68d99e18

    SHA512

    78132f51620658a6c7bcdc95c0ea406a3549f794de8eecbb4ed4963cd123877ed75609f4299d8f13d4896605ca50ea436f5f0fa608f3dd9829d623a7562b80a2

    Download Submit