Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

7a8c09b9fa...e0.pdf

windows7-x64

1

7a8c09b9fa...e0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 14:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7a8c09b9fa90aa0c81aa0c32026c64e0.pdf

  • Size

    78KB

  • MD5

    7a8c09b9fa90aa0c81aa0c32026c64e0

  • SHA1

    7ff48d1d650b7d4fa26b4988c73e52b156e67f34

  • SHA256

    5dd68c5ac4ca4c22c6fc628ad0523308bd8046e91e72931f1484e04868051964

  • SHA512

    a51a7581a60a4d38f0275b13a2b6fe8b496dd29d344cff51d665066cb807bcfdc6b7e4f0c67f17f23e21fc558528700246c5a8a3ab65dc7cab2a826807e10c2e

  • SSDEEP

    1536:43jH2LpwgTEpbIIJPxMq9lkEZxtYV/DjFrjeAh/T/0q4MAfiRJ/Dj2kZVGBM9sra:+jHoKppbIGCrwUV/D5rjeeOfiRxlUBa5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7a8c09b9fa90aa0c81aa0c32026c64e0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    56b32940cf9ecf1f6349c8d2075005d6

    SHA1

    48ad5835ae936a40feb70d41e23e720a95e578b5

    SHA256

    d87950c01ecc370d368592f60a9d8c6d98ce85421b44a9dff35ae56854c0e9f4

    SHA512

    4c1c504fe00761b27933e0ca92bb069730551dd08c6375efd18e6b1586c9fb059b81209919da73cfbb1ef517fb47fb84e91303f10862b0f73ffe8097aba820e6

    Download Submit