Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 11:17

General

  • Target

    8c30c55c5764e692e010f8b6793ac357.pdf

  • Size

    88KB

  • MD5

    8c30c55c5764e692e010f8b6793ac357

  • SHA1

    ad94e3ecb29f112e4477430a27a332a2430b3fff

  • SHA256

    dba938964b6e6e890bab2187dddf8edd02d354a71d790385f093563c6ca850f7

  • SHA512

    776df846f606e9c290f2ce21145def20d5a08b6a31f5490daef04327886ea39eb7a846f3718bd3bbcdcbeca9343f991a77d1ae895045ccb05ba63877d4b53c85

  • SSDEEP

    1536:RfPOk6LEFQ3AEWjzEzKpMLhz7eRAKR5whWGFX28OSJWuKJaww97WJ3X5f8po0r57:NPOkpeR2cFzKD5bGFGFSJWuwa9+Zf8hN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c30c55c5764e692e010f8b6793ac357.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7fb18f8f389ffc652e39d66fd1a1ad4e

    SHA1

    791fb25d37775d29e0de33c9af38f0eea5dfc614

    SHA256

    302e243b3f2e9762ee8a4ac751669e1c0a97e5ff7356bf0ba466ad97386a4c43

    SHA512

    8f6da1858ad171b081438b8a3f431821163740575595861cdd4189ad97bd42d0f46777b4064144aaf478834dc47dfddf5408b33a08200ebb5f12048535bf243a