Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2024, 14:17

General

  • Target

    779480a2a1c79f069a5ac229d9443c99.pdf

  • Size

    87KB

  • MD5

    779480a2a1c79f069a5ac229d9443c99

  • SHA1

    560320ecea5ab6e867c23c30b0b8483da24b6c38

  • SHA256

    35bd2c88b6d0fbc8853e6526f0b86f046f6a496881a4a74b4b149fedda3afba6

  • SHA512

    d26ed851627dc9c8e2c0c7022a095e356f680bfdd9677a33484eea05766727bab6ccefd4c61388cf0651d3c9a9b240f31781bb8012962dd8992f05df307c276f

  • SSDEEP

    1536:sGLwtBK/C5G4rPVDDq5WoitB2wtTYF70OEOiiDTEMayWYj8GAfauQnWBW8pO7bpj:jLMBKqRtdo2g7ZuMaNfZQnW479

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\779480a2a1c79f069a5ac229d9443c99.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    927fc9283806623bbd60b775836d5dba

    SHA1

    430de9d736271994b7ff406e18f4858a29fde712

    SHA256

    8557c437738fe6662b2b696892f7c1745692473a555781e58a0f6e01678b4c98

    SHA512

    38c113a88d9dbd6018524a105eb501837cf91449c5a91927eb31fdf66656056567be3997df0cfd9558b4ecc482f1615d292cb9330c6cb60cf87e17522c76bf0b