Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 12:33

General

  • Target

    8f28db417fcd133bca8d5d614f3c1ad6.pdf

  • Size

    110KB

  • MD5

    8f28db417fcd133bca8d5d614f3c1ad6

  • SHA1

    6e135818e325254d0e5a3b27e619ec3e684f5721

  • SHA256

    4c76adfe548eabd67f8734f3b84e9d96d5ca84501295b37a546222c69263eba0

  • SHA512

    4fcd589d517bc9df218d83cd8f059f7e1d6e4173461e06b50068fdb8a01750ced8ae39d6fe69e9466125b26444d95a04cf9b714f632a558f6f00cacef84af9de

  • SSDEEP

    3072:76CmDZo9TX2Moe/298ixH8+/d2CP8qzapQaZreahHr:mCqZo9yMoeu9Dxcw1P8qethL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8f28db417fcd133bca8d5d614f3c1ad6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    56e4bc215e254e73fb4fdfd56130eda7

    SHA1

    cda212105277ca3012f04d5bf0b0c776d62d851e

    SHA256

    65bd1f2c4beebcf92afce3830b0fbf0afa3ade6d31834087c5f4458b501d454a

    SHA512

    8b9b1c085b1c9d096ff709d848c20010ce2c86683e829683418f5364cf906a176a9c464a80374a07bdf6ee91da6cb4bf85e98c51d93b12632c8c823063b23d39