Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/02/2024, 21:11

General

  • Target

    795d7256c73f3e097dc6fad6afee7c6add5400e09323fb18b17a6b44da15d216.pdf

  • Size

    103KB

  • MD5

    c46fde521f144fde36418bc0189f44fb

  • SHA1

    d6c6e4afb4fafc90124bc0c001d8db10b4ec46ca

  • SHA256

    795d7256c73f3e097dc6fad6afee7c6add5400e09323fb18b17a6b44da15d216

  • SHA512

    fc2a0d2711d00a9d5aa9188c5910a284f6b375ef6357c7ab381cd62cf33f6ff9969dc40444f39c561187b4a8102c9db2676acd0e6f118e334049029b7014cbf9

  • SSDEEP

    1536:FlnyivSxhVQsrH4mmT1IkzROhnY0sgVPQ79zDAmI4rdSL0lB8:FVDvSxhtrH4mmT1I80nYkqFAmIiSL0l+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\795d7256c73f3e097dc6fad6afee7c6add5400e09323fb18b17a6b44da15d216.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0bed150c970488b8a9189fbd12e6e9f0

    SHA1

    59d8057429c6e59f296fca976f8c44f1bb5cf6b0

    SHA256

    9561df12d9b41e343a3a867ed7cba16378c755c91df9ca42812823418713b20d

    SHA512

    4457fa8fd5c18a8457225d6947b4cf6b203ceb1b0670ed7c8491ac4e8d1e417a40c20bd6ded90064f8a4266cbe9955819d3f4bccb586c8b2cb8951216940f103