Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 18:18

General

  • Target

    7aef8f056ad8b56c4556401a5003520f.pdf

  • Size

    67KB

  • MD5

    7aef8f056ad8b56c4556401a5003520f

  • SHA1

    d0c8491bb129ab51e0640411909a05c0548c6d3a

  • SHA256

    c5def3ba54737b8dbc622aba5c37231618b5783134bb4be11d6a89d8dbb9fd6d

  • SHA512

    ec4d50b6dd84f8f379fecf1e07a3a97b22a2449f7d0a12cf6ffb7ef5f46e202ef029b016c205c5dea90d9a3ac2120bffb9df2e86cd4d18232c812172304c55e4

  • SSDEEP

    1536:bN9vJ+xSEcyjW6ffWC0FnOt96j5LidLxf1W4j9gCdnKs:R9+fXW5FnE96p6Le4rdB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7aef8f056ad8b56c4556401a5003520f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0223bd039f3504dc4880fccb472bea61

    SHA1

    d48979a37fc66dec5f43de208ef166683c1f6aa4

    SHA256

    d9fdb4f284037ec3d23f7b9edea79fec6f83c7d0d71d412d559ae23dc2a8deb7

    SHA512

    8564d882b19abf3be357730097d195cd2bb3fc7a34a934b9834e0a212af5d3f4b546a4c06fd20db7733ee72b505d942ced94489df1ee00e337d3ad5f6dc0d89f