Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

7c431d20d8...6b.pdf

windows7-x64

1

7c431d20d8...6b.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    130s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 05:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7c431d20d81c3dfb1f6004a475be686b.pdf

  • Size

    81KB

  • MD5

    7c431d20d81c3dfb1f6004a475be686b

  • SHA1

    b2b53d898db799df50b0ed006bd2176874da4074

  • SHA256

    9d7e5f7d63c5d58a5f12324b9db687a81e2299cd0ac15a69d09b13be79fac097

  • SHA512

    75d3e971443f58900c3f3b1f009eae9fa39c4982ae1c9e0069375f48a43ec373cf3b963751d079c405d1e02c682c93663d600d708bf0a67086e962c4321c4bc4

  • SSDEEP

    1536:qJ5Dg4qg4psfgshIVsQJzKcJ7VKKcMW7Etp22OWxApOGhciPG/:W5DgTgHdhnGDJpHcEtPb3GSia

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7c431d20d81c3dfb1f6004a475be686b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c01e421a810b6fcd8cdad8ddd13041ef

    SHA1

    3d7b529d4a22b49f96326ce0cdc6f5536e3b43de

    SHA256

    11d07aee80b94ae1f6dcc6347fc9613d391881cfa8043e8f6d9c49788d80d70c

    SHA512

    2bf0c4acc90647d69922a7aa341dac23784a40a3fbd4946f946b7bb23c857f454580d8d2f6208003b1fb6c3ac38da7e20107697473c6dfd2d98ee72ce990a383

    Download Submit