Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 03:49

General

  • Target

    7c111d2fa8f6a518bd7ee540325f5327.pdf

  • Size

    46KB

  • MD5

    7c111d2fa8f6a518bd7ee540325f5327

  • SHA1

    aaa73a38dcf6a881b6d5e4ba85b016c085607ddd

  • SHA256

    4d1f552871427acc471f4787b6955384189e89a176a10cb92ab23076b20a65ce

  • SHA512

    40bf2b702dec0c7afbec8e448a4cb0df3694223ccd1420ce47b21ed23107dc702e7fa7048ffb3b309c9d5649e4744ad2f849b837508227a398b48b9d5b3b65ac

  • SSDEEP

    768:qnDLZiDsHWWZpeZ4Bn6im2QKUY2MsRj1RvfIlRaDqyGC3DQTwfUT0rY4VOe:IZiDsDZpeZ0Dm2+YrsRj1RvfsRaDJXU8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7c111d2fa8f6a518bd7ee540325f5327.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d4576b0a1338525e46c7e00edb8aac91

    SHA1

    843b8d0c64e57da99f7a218d6490c6716d124aee

    SHA256

    abbc60fd28808be787c675160b454df8eba4e49988a48b6a17a94d4c3a5083fb

    SHA512

    350806bf63258fbe694463811eff189cf9498aad9c2cd173a4b907b3aa5bccee5823329ec547d0ab83bc14a0f78cb6f677e55a6e4d910e0583fb78d35238583d