Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    21/02/2024, 06:37

General

  • Target

    NPCI Arb Phase - I Docs/ARB Automation Project Coverage 170224 Ver 1.2.pdf

  • Size

    1.1MB

  • MD5

    d146bb5b40d256800577bc3cbab59024

  • SHA1

    af61585c167b4a0e5a7c5d372cd577514687ba80

  • SHA256

    3392548eabdd883a955d021e876fe44103e269c6b8c048080a593ab18e535326

  • SHA512

    1f8d93212f4d380ece5b78e878a4921b086fee01ba52b80300c33e5c574596384788a1b6968694a1e168b81ff7c6411514a01d52a6660712e2e9be26f24454b5

  • SSDEEP

    24576:iz91ST0o06EgcsdJuvDk++OHlZfUhZbBZLLjzn9zcPP+rEZdO0AAq33:wNCdILfrfU1xXz9sGw7RAz3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NPCI Arb Phase - I Docs\ARB Automation Project Coverage 170224 Ver 1.2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fec7c1f8da588c7822a437ff0d75806c

    SHA1

    4a0388931974774b13878bb3b41603aa6c97e67f

    SHA256

    b52cae2f560db72ba631dfdb4eff389507725c6130db3511371d2d3ab5887587

    SHA512

    b100f8ee10986cc56378dae427966ad78393f90d95ba39251d72cb75629042b2a5fa8fd649784e6b64b4b430c04aa76ac495635ab8f7e457ba7bc8ccea0b3a59