Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 07:22

General

  • Target

    a1466c02db68ecf202a43d6508b19d92.pdf

  • Size

    95KB

  • MD5

    a1466c02db68ecf202a43d6508b19d92

  • SHA1

    6dbdae399123e6c9177c74d3578f4f66da085832

  • SHA256

    d23ffc0bd02b2833a3a7fc5563745e6982809b6ace36604ccbcc9f2c92c10b16

  • SHA512

    51c136896c8f1be2e44841da87a41dddf84bd7b8389e7bac66c3745b1bf1aa3a7a4800ff692a2dd4328df3aeafc12ada7c35a983a75fb072850d69673abe30d1

  • SSDEEP

    1536:CVINSn/X1374GunOsWagdI+6wx2BHYwiCD8lI/TvZimS0Wqnz8B9mwRXXsDczWQA:YCYlnyOpaPwx2hYgIy/TvZiqnAmkXCci

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a1466c02db68ecf202a43d6508b19d92.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    23b48a587d4ca5ced88ef57835875568

    SHA1

    27ec1626cb8077e6930fd1456a3fb33f13e4c9d8

    SHA256

    617a33b33134495850a72030ffd040020262081747d521a80383ecd5f9fbe7dc

    SHA512

    c2dcf927ee46e1050d7533b6c4ace9beb164d73d45fc2e1107d07282078baee26c57707e280616cad819b45d890bdc5158e58b694dbdbd7a8222c41f8b245ce1