Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 21:22

General

  • Target

    97a2a03181b151c681611e70e0fa1c03.pdf

  • Size

    87KB

  • MD5

    97a2a03181b151c681611e70e0fa1c03

  • SHA1

    c0d434e522f7e6a5cc653a05c99093f563de1003

  • SHA256

    b844f9e07cacbc0961688bed9ba8d683257583da1be2d880c708a698a2b7e920

  • SHA512

    8a8fdd5730b177703ff32906f208aec9fa204492ea5d12544928c14349ed766c88c5f7e6db6c3754c8998ad4bceb7c51d14159884bb3426682a01a11a4e201ba

  • SSDEEP

    1536:oB66tTQ2L7JqAB/3Zs+4WFz8ldDLPorPwZn1KzWz49xJtRRM/eOOSEUxyGO0qfca:gBrL7lH43v0rsozo4fJ6TxyZ0qEAz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\97a2a03181b151c681611e70e0fa1c03.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8b122a27e107de2c5f75bd949bdcea1c

    SHA1

    83d6b4e68dffdf429a564aaa5e4a95fd5e38078d

    SHA256

    cb674635f7a014e8c3d1c0b4d7b6cbf8041902abe42f2f20720c1a39bff9cde9

    SHA512

    24c595a0158402421b0488166821d076710645e273a90599c1c0d49c9f2a5ae959fa141ca7c061223dfb4852458b6c69ec64be64cc389f12c0d61c951f3631f9