Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 12:38

General

  • Target

    7a4699f2f3f14af9bd24a6b0a4761bfc.pdf

  • Size

    45KB

  • MD5

    7a4699f2f3f14af9bd24a6b0a4761bfc

  • SHA1

    e8f59eb6059f3f5dd3a1596b91e287f0ed716621

  • SHA256

    15ae7752434cee3684aa33e8ba7f03a350751aaf027190544784b83b19cac2ac

  • SHA512

    dab8676951540ae733192dcf37ca371ba1c5cf28729cd40f26d341d6f40cd114e5438e4d7a0110635ee9c5cf54313cf48dfed915af555a6e0d5558bde19af3c3

  • SSDEEP

    768:9qsZaRXSDgEtFSFUbdfjkxpqmPHq74xskBbDLiIIzqSE3dutqjuYCtrn+Q8bAS5D:iRglt4F+fj4pqmPHq74xskBbDLiI3lu+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7a4699f2f3f14af9bd24a6b0a4761bfc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    55f28f2ae6945914bfcb6c8252b128a8

    SHA1

    782dd899009ae33714c1031b760e42955a356c23

    SHA256

    dd2bc7dfcdc3e9c7ae9fd8b1b1587ce4db629e32b1e7bf6d27cad0e10b231988

    SHA512

    a01f4debd40cfc7f0a96470201368b4dbcb8d1cc9bf0aca3cd78a10ccef6e4169e9c53eae7d3ab787a135b7b622d4112badbd38450c562f865f88ff372a90e58