Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/02/2024, 22:18

General

  • Target

    aa4c3026c467984dceef385a96059f14.pdf

  • Size

    81KB

  • MD5

    aa4c3026c467984dceef385a96059f14

  • SHA1

    9b4c4193e57cf1dc4965e21a90bfc9d6dacc63d1

  • SHA256

    df9f7bab0ca1426aba03061b474689b5ad89cd73b97eab462990505b132f9094

  • SHA512

    acd6785bd56d2725b7eb07d84908182627007f26e053f4b2cb4c10d1fd95285597b1d58cf23d24a24216dc6c5a884894bc7ddb7c30fdaddd071f04883aaa0b64

  • SSDEEP

    1536:UM+rBlk0HwIHGcAqE/7wGOvx9v/oyR2P9D2WkJmPEP94hyGWxApOGRV5TWLj:L+XZHwIW0GOvx9IXV+suAyT3GRz6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa4c3026c467984dceef385a96059f14.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a38298fb0d70046fac84f1f0e7bc3b87

    SHA1

    59b3dbd0c9c916734d3d9fdcabedfc1a1cf143e8

    SHA256

    5788e89d6ce593592598c5f69c12f29ad831bbd00f810bdb5462f85898a8d80b

    SHA512

    4161ec6f052a91830cae6a2534e78a03e3e477dc218e7f3b90da6e331d17aa3fcd114498675f5ac48b12901aa99786cbdb3b911cc4a35b2079b5ae508422b2bb