Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 08:40

General

  • Target

    8eb599ccc9293c594d24ac6f2268acb1.pdf

  • Size

    79KB

  • MD5

    8eb599ccc9293c594d24ac6f2268acb1

  • SHA1

    d30addccda36f9168782c626be3068ba15827a63

  • SHA256

    99159fc3dea159f85a04a3f4211cc871b621d145199a4ed4b65aa647cd722e2d

  • SHA512

    6b122d6696998e09e16fb87601e5309300baa1fa8c84539461eac1893070cff2c5197b991cf3cf7f277f3178bbe24ab1e92e0cbe85fb90fb175f6ea18a69ae10

  • SSDEEP

    1536:WW7udEJaBk7tJ65NacFX/H8Cyw+h51puYc5LiqjszsljzKgkys+ajITyGxwp62RB:iUik7tJSbdcC9moZIzslvTgn5/RZCkJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8eb599ccc9293c594d24ac6f2268acb1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e331c24e395f0338f2e9cf0961489e15

    SHA1

    b6fc22044bee99a9202df63e3e39919c0309872e

    SHA256

    fe2d2988af3d29e9e876d1c07c0d2b309b01a44107111eb760693eaab7d4bd2e

    SHA512

    17e30e13df294fcfee4ecf6d411c2bf89b8f52e85fb8bdca16a56822fe1eedee14e53bddf43f3d174d663a7cdffd13fb09df315cf0b0a4881af94e12c87a4ca6