Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 12:02

General

  • Target

    8c46b0ec0e87192d453b947e74cb4d26.pdf

  • Size

    84KB

  • MD5

    8c46b0ec0e87192d453b947e74cb4d26

  • SHA1

    bb9cf12e64b23615d1de5b2b0bb7e88a37203f99

  • SHA256

    661b9f1cb2110e3f4103c8bb68a9a07a1b4bbd3d347a7d1c2521a1c5d912ab8e

  • SHA512

    82bf4e15583b67c2395d209895aa15dfc0726d20d68babb79b476ebf9a9bcab380d1a4462365850978aae9a7f1c243021bf59032b6d8d2d26c2dd67b31aa0c96

  • SSDEEP

    1536:OvqFvpbN0ZGy33RVt4MX7YJ9Nreg+khXmAKNMqWHpOvTWc2BX7EzboEdlA:BDmVD7YJ9xH3H6vL2BXozboE4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c46b0ec0e87192d453b947e74cb4d26.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fd1c8af4e20b0958b3b2f8b8399ebc20

    SHA1

    3d1690147cb53807a89358444841d0ece74a7214

    SHA256

    db1ef6e9191000327e7ea2d2b6b0925de94150e34bd46f7a58d1e302a5a2180b

    SHA512

    26d29d8a511df4a396d529196325e732dbee8ca69c6a7e4a056d5b09efaf9174ef3298fba1c706a17c0b83af3a51119d39d48f9ee547c01e277087e89727e308