Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

8d044c8e81...a9.pdf

windows7-x64

1

8d044c8e81...a9.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 18:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8d044c8e81e6d79fa10c8cfc882d08a9.pdf

  • Size

    107KB

  • MD5

    8d044c8e81e6d79fa10c8cfc882d08a9

  • SHA1

    dde8e5af4c2689b98c7faa0b4fdccc7972b5373d

  • SHA256

    ef6148efdcdb392bb25cf0b3eb558b4036f9e44dbdd4218a1d914ca77f7f9682

  • SHA512

    d7d79f10fdb254dc3dc7f8334b69be65f517eaafb6e6e96f5ba49374a78991aeaa9b2cf72c44157aa4e3a12f1a0c566990a9317ad436ec2aacbed1dc4c55e752

  • SSDEEP

    3072:slaV/IxFLgog+MziUKo83/+ZeFzTWM+/Re0I7:iaV/I/LgoVciTF3ik3WM/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8d044c8e81e6d79fa10c8cfc882d08a9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3d028e7587cc7612e8ff269ccba68f8e

    SHA1

    ae536663d3a9c4c259d3735280266feb6a84df73

    SHA256

    488fd61353d546e6a2d8d7f74d50e420d290e49b5b94a6530ef56c506a8be88c

    SHA512

    bea0f9609d95a972576db7fb8d9dbb51d09d1893b40be6b73f4da85282960e23d3b8a584a4420989b9a7722b165dadc26481a9ccafd2af7eb5d3b632e5226d5e

    Download Submit