Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 17:03

General

  • Target

    99ac5aab86387b6eadeeaab843c17505.pdf

  • Size

    86KB

  • MD5

    99ac5aab86387b6eadeeaab843c17505

  • SHA1

    455caa03cd62040db5f6f520c3b6bc33b2d30113

  • SHA256

    1028f46533c763460273df96a665715171950ffc117c6c275bb742177768ff52

  • SHA512

    e175d5f402c0c29abd9938a94793956eb6a99e6a4ac75a9c7b3852ce21bb6a2e3c1fdc8413a636b50550e9cabc5457d37cb9748c579f7ddc112a4c76309598e7

  • SSDEEP

    1536:bAJtQ49edbwDZ9mGRaV1MSoMjZTow0INM6pw/05WkNpOPaWzVfwbWRZ6K15XCt/h:Uy4Z9TRaV1MFMlF0INDwdP1RZ6GC59

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\99ac5aab86387b6eadeeaab843c17505.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    684399d137592c6aa0f27f1e7eb9790f

    SHA1

    2a9e616d66bbc9708a54492c8d6838d3e3cfe197

    SHA256

    60769b4a42af85136889f8ea134a9066f3cb91f46fee186ecd4a290f006d47e1

    SHA512

    55b2d973d114d719d568f4e8124bf7eea603f7ef49099a427efe709258cb70c8eb14a9b4c40b25c9b97a166efcc8ea2adb79c29d79c128cd197ec278c58d2f75