Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 02:48

General

  • Target

    8e079ced07a6ea9fbaeae92a60de5fe7.pdf

  • Size

    34KB

  • MD5

    8e079ced07a6ea9fbaeae92a60de5fe7

  • SHA1

    ddf776aa969b5d6fd14d600e02c9cd3942c9e7c1

  • SHA256

    600dbe83a97999326863c2812ad990fea0fb629e51925839aa3b7bfd3bbfbc61

  • SHA512

    7e0deed8d6953e1ae52aeea46fb7d083a6553266b1a78c55edfe5e0fc6f9a44f1669705b39d838c5f8f9604b24f1865be4360651c67dd55e5cf863bd852acb36

  • SSDEEP

    768:OvhYk+h4TxRssknImVso15Vu5osSI/oXdvJqdvYRLZstQUm:gYBLnIWso15ompIIvUJQUm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8e079ced07a6ea9fbaeae92a60de5fe7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e012a2fda699a0a41896b5f0288f0d0f

    SHA1

    4457208f07b098aed8b27ecc64f55f76429c3090

    SHA256

    297eada48af13b820c3f2614f20871da668b963c0c1adb621ab8e475d143454f

    SHA512

    d209c1eba69acb6043160e03bdf36db7a2e66a2f2a4aa00ae8e3f8eadddf19a2bfe7957e205d329ddf0955776bc0119efbfd3500f42049f42977f49bedc23391