Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2024, 13:59

General

  • Target

    778c213dd386ce3d2dd581d914ef3b49.pdf

  • Size

    86KB

  • MD5

    778c213dd386ce3d2dd581d914ef3b49

  • SHA1

    3d8a8d06b6de150e0e44ddd83f9f376075553c60

  • SHA256

    d00dfe37485f07efb4911ee9a3ee18fc1179e1173fab0d4d98d7bc2e4c4ccd67

  • SHA512

    a4ac2a602487e596fa974c3a1bb1dcd6887066211a38bf14f229223b84275d8c14f77827864097fdc1489d14e1e0cb26a4991a30b1756e491f463cbf65e573d7

  • SSDEEP

    1536:6lhQfSGRcYmiWwqOCZfv5v0kRj+eW6o3XuEp/WWMsYFxhm3wUWOpOwrf+yZt7:koSGfmLOC9v58Mj+X6WuEp0LFmgxwr2c

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\778c213dd386ce3d2dd581d914ef3b49.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    06374985412512260fed8de849c62c1d

    SHA1

    8f6d3f7b7f17e70242ba00355c4f8e3dffe243df

    SHA256

    f5607cb790d0f8026c80dfee751299f84af32b59ada1d70d220ec18456a29ee5

    SHA512

    68d873f386f38c56cae27f2468487e980ddc7fd3569120c016a80f2fbf877c6799d081e59cd88ada3b1d26f2867423f43c3d09a435dced32cdcf72a0ee4b8850