Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

7a5a64a3f4...3d.pdf

windows7-x64

1

7a5a64a3f4...3d.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 13:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7a5a64a3f4097039c357d30fb734ae3d.pdf

  • Size

    86KB

  • MD5

    7a5a64a3f4097039c357d30fb734ae3d

  • SHA1

    850e903fb7c7eccb107cbe2c9305b2bb00e60537

  • SHA256

    311c36cc5815c220cbb5d0c8e3a6ae0b48c946fe1a465433f37712e0517f4824

  • SHA512

    e430a047c6bbd02324a5ffa1879b1c0264a343ee0e6ea135439f9fe41e29813d9f206f3a93043186ac85fcc2f0ced018c91316403b867a2e0c39fe1bbfa1d583

  • SSDEEP

    1536:bYawD/ty0uSIOUfone9UJKQDSM/eOl/3UWxApOGzWpxV1L7UEqAe:MawDlPP53GQ13GKxvK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7a5a64a3f4097039c357d30fb734ae3d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    93125795cf08d282c145f36d9f6f95d1

    SHA1

    9e71dbe375fe65d780bff598b5b621a069879c7d

    SHA256

    dca15aa54004dd5ed0c87757531c13927e24c54cd9075e41b7fbf722161210f8

    SHA512

    8e18f68148fb87d2e5145e3a6003a7109d602b74a74bf722b914103cc816066ce7403e0776b50da5d5f903619277ce55cdc6ed63395eceed5f6b6213730a99b5

    Download Submit