Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 19:08

General

  • Target

    7b09ab90b09ec1809257485f9d419876.pdf

  • Size

    95KB

  • MD5

    7b09ab90b09ec1809257485f9d419876

  • SHA1

    dd4bd5286079e7ecee10f171b0203313883f0bfe

  • SHA256

    03cef56b8665b8d95460ea611fcc57647d1974db7bd8c1123cbe026663d9dee2

  • SHA512

    8dcb0177f0a9f7292ff873bae1de5a7723e9f28217234cabe0fd278358ecb17d0cd466f44e91643b0bfb7e87f4d351c446b99318697d2c60036284bbb7aa75aa

  • SSDEEP

    1536:yrMkKnFzJG79/D5zqOpkFTe0v/DmYNxkWgrVW9Eo9ZSYfK4WOpOwrZV0dB:KazJG7HGOpkFd/D1NxASnSUK1wrZQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7b09ab90b09ec1809257485f9d419876.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    aeb1e04cb5fe04b00060e735daf01ac1

    SHA1

    50b1633000e5f2cdd8d1f45e842dce6dc2bbb890

    SHA256

    db6b9251139b091ff15732b0ea44806e7731e4a8c0e31290c5affc69ffc575a2

    SHA512

    53e22937a823af31fe0533c915285e40bf91cff4b11cc1c7125e30dbe62b35dff635630daa9ca0c0474bfed5f10ec66af6d0c8cef4dc1af311b9c33b77b271da