Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 16:50

General

  • Target

    7d7f7080472fee59523f24d188f98df8.pdf

  • Size

    76KB

  • MD5

    7d7f7080472fee59523f24d188f98df8

  • SHA1

    a2e1ba08d5b2cc63bc22fa0362a529ae48cfd72d

  • SHA256

    2c033fe6f69b678232d529c9248439ce16f50435b4d31dfe8a4b3ff4c86d4493

  • SHA512

    f03b6303632993435d534f04d9d8f2fedf777171719ee07a7c42c4eb79bf64afec40f025200bc3841058186ee3a99eb67316fc7a2010a9b5111e974a50416b83

  • SSDEEP

    1536:p+bFJ588YApW/RSiqHYxUkA1H4slDQPRIInkGWCpOViIWj0L8iiNkTJscP:YbF/0ApWeVTh4sl0Plk7Vizo8iA+JV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7d7f7080472fee59523f24d188f98df8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    905f755c235f0ba25328bfe784a53aae

    SHA1

    1134185470b99aa69413916c08e7ef09ee9d8282

    SHA256

    4020976087ec6111329dbbcd1eef6933045a7fc7cbcf0e352c986dd04207e84a

    SHA512

    688344ebfab696156c3a5974ffb0fa954ff59f5c9170cd7de8756ea6e53ea531643bce0e31fd76312fa6515ed4ac23fac56a19c56ecac5fe703def272267f8f3