Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/02/2024, 13:04

General

  • Target

    a1ec917d38ceaa8873b72f38a6d61991.pdf

  • Size

    84KB

  • MD5

    a1ec917d38ceaa8873b72f38a6d61991

  • SHA1

    b3b652238e54031ac6b45de8f06d414a6c9cf277

  • SHA256

    98a6793ea43b69be39c016e38e0090e92185670c525a0599c488e3ba1d253cf1

  • SHA512

    aae26a5aef76587c2a40229f381b4019cae4bb45d5811a6c92085b7bd3feb45954bf179ec0d6aa9b2199130d5f9e0a0512abb30064ebebf8955dff2b014878a3

  • SSDEEP

    1536:5RTCYTaLLu7JcEga8EIKlya1eLoO6nROTbja4X8pkWA2Q/cl:XlaOGEg2IK4oO6nsHjWym

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a1ec917d38ceaa8873b72f38a6d61991.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    11e3e02d703936057e18217b92059a75

    SHA1

    26f5949c3eacca20ce2391940325d5d243040220

    SHA256

    336394b2c317f832770fbfd73194e7d67a536724483b432931319f2a50434d99

    SHA512

    dd605e470006134587f49ab68374ebe6c1ea7ae758dd0e5fcd40fb9b8d062289259cdde706dc2f123c81d2e312c8093f94681f63a99c91692cc3585741f9ea79