Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/02/2024, 01:55

General

  • Target

    9a78400d92b6c162371085446bd8bb22.pdf

  • Size

    87KB

  • MD5

    9a78400d92b6c162371085446bd8bb22

  • SHA1

    e52a8cb9a3ca8d618b1617d657c52d1d6080e8c2

  • SHA256

    314b29442720d2286b04eabefd3dc4e74a588bcd87ca3727a0c98c7616d82ae2

  • SHA512

    c25df8f23b5a274a9f2f3f778f874bf797bb5bf916aaa59fa87410a510a80260ed3fb150b21fdede8697734666f1ce0ebc7c4f27f19590e0b3a73ebb8b99a357

  • SSDEEP

    1536:lSvpg7s5CDMQ7olJgQpdrRuUdKOio3bpbBwx4OIslWL0Hxld+WCpOVidsDkW:Evpg7sMQLgQDRuhoLnwOOlo0HPdTVidw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a78400d92b6c162371085446bd8bb22.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    43443bdfb5d4734f60f25739e440fbc9

    SHA1

    a06700838302001137e2011b3f3cdde64ea84f49

    SHA256

    f595b1251425edf0eca31a7531f494c6c4336f730c98aff686a216b98222a9d6

    SHA512

    939058b1da34144043661d09a91d462bc4df85629e0481fbaf131209b1ea46d7610eb0771448af6ff4cbe01b6aaf4edb12248954a6d6db4a0c734366032b5595