Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

19/02/2024, 21:15

240219-z34f9sdh49 4

19/02/2024, 21:14

240219-z3j3madc8z 4

19/02/2024, 21:09

240219-zzn76sdc4x 4

19/02/2024, 21:06

240219-zxwt8sdg46 4

19/02/2024, 21:02

240219-zvllgsdb61 4

19/02/2024, 20:38

240219-ze2mrscg61 4

Analysis

  • max time kernel
    1564s
  • max time network
    1568s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/02/2024, 21:15

General

  • Target

    water.pdf

  • Size

    2.2MB

  • MD5

    9433dd42515a296d1da339ae4b5e9429

  • SHA1

    b9547f3788105563949dc95d016350c12f429525

  • SHA256

    012119721ed9de6b4f7cb2384423e63bb5e8093319ecccff5091b51edbb55e1f

  • SHA512

    c33d949bb35cf7c3b1ff825e796fd1b08ea3132d305cdb102d3591177c45d0c26c9f5da4d4d9d5d446d962fc56bf109670f2ea8f01e9340d166f4edf2eb91062

  • SSDEEP

    49152:XgPsLITpmtUh0Jvv+kds3MIZs1sS9Qoxak:XZITplavNfAS9Qoxak

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\water.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    10acddd421af08b7a5003976d2ad5a29

    SHA1

    f22b931b0b097380df52796987e9e4c703f09a5d

    SHA256

    3e3a5fe41d3c1d76e991be7778676b496dc6afd245c6c4c28c7f77680c16b44a

    SHA512

    0f39992996123ffe50607035ea095105ba81f88c96e60c7a9487238f40e4f8f07e54243f59ec405fd948f7b8ca37f874babd14564d9424421c03c588a25c22d0