Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/02/2024, 09:38

General

  • Target

    d78478ab88e9c82c9b487317a586e12262078a0e24df544b70449484d8f4d4f3.pdf

  • Size

    351KB

  • MD5

    b97f91ee0b6d0cbb222c4ff537790dff

  • SHA1

    76a1eb559f81b8015d914ab6d45e51a131e38092

  • SHA256

    d78478ab88e9c82c9b487317a586e12262078a0e24df544b70449484d8f4d4f3

  • SHA512

    09d7085135fee95c8ac1d6dbe11d7a851b5d53acb8fea2ba93de4ff7da30a73ea7c12139668646ffc910147dbbe481b516458bda9f000b1d3f20a103b1547595

  • SSDEEP

    6144:GfTvMVg+trIey2yYuvHCPLpcMdUASu7g/uo2UtqLBJobRwaKXH8:GbWtBy2yYUizpcyUAS+8uvMW8RwaKXc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d78478ab88e9c82c9b487317a586e12262078a0e24df544b70449484d8f4d4f3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fd610bb2d5fa73f0dd0e76c4fb9aa3ad

    SHA1

    381ab95187f6426dad4f969accd77f47cd17fdfb

    SHA256

    362683c0ef2bed6f0a191ca4e5add1fd3be0c1e0540fa2e43497bf0498ee7ac6

    SHA512

    d171700a50ca3a153dd4a56399eee12e52044b4b31134b9fe62b24c2226ab402b8883979bc4e4eebc0820de25510838c6d32a3dd839dddeabc26fa92dbbb909d