Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

871870b28d...ba.pdf

windows7-x64

1

871870b28d...ba.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2024, 14:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    871870b28dc482ed17fef4bdd93d4cba.pdf

  • Size

    76KB

  • MD5

    871870b28dc482ed17fef4bdd93d4cba

  • SHA1

    8e1dfe981b545819dcefdb9c4cf5a310b34965cf

  • SHA256

    229b456de0a36a5fa60caaafcbe7cece348794d3a5d73f491d18b6bd4c04a7ad

  • SHA512

    a33906bde7d577a0954a56ebb6c36d19240d4567f579b42a6c2d6c6aa78cdbdfd89f6f181cdaea81d21215de88760551608a5121acd6222908b61e7ac61c6665

  • SSDEEP

    1536:5174vJPkA2I/ZNOBOOZIPdeks8tSSGWbyfDek7WkUClxDCI4xW8pO7cpJ:3QJ3hRNOBOOZIVeks8tSSGqyfh0qDCIW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\871870b28dc482ed17fef4bdd93d4cba.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e7570135a2282bb036c95755b7798fcc

    SHA1

    8545beb922179483c4528b382e75b0f2e14736fe

    SHA256

    3877597f67efb28dceb6531a1dc3511dd19b9167ac98ca65a3f1db0542e09ef3

    SHA512

    6e007ce50be8082429babef38728b5c4ed1284a4a93e0765c11c00653cd9562c388a9a1b3f5a77ae5d9536225417265afe3caadabe773314feef24d34497470a

    Download Submit