Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

aa93795315...c1.pdf

windows7-x64

1

aa93795315...c1.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2024, 00:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    aa937953157882640bf22fac8b16a1c1.pdf

  • Size

    48KB

  • MD5

    aa937953157882640bf22fac8b16a1c1

  • SHA1

    8aa184a9b198a7b3de9a8614173d86a425ebbe30

  • SHA256

    68e0f9aad0d6bd2930c3ba805db0d80a37082376371c5752b5fb28a1a5e641c4

  • SHA512

    dc009ad4d83e32fc1c55917b9548fbd8a601274119cea3e4c8c98e95be21f54878fcc0a22ff8ebcc629dcb6ba15405427e432ec3dc7d1a006c5c076c6dbd1c22

  • SSDEEP

    768:shewXDAPNUyAZqGmzn1P/2VAwTjNMCV+9PxBKWmA0cZizZ2llAb6l5VhW:gbXcUyx9ANTaq+9Px6A0jz6LW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa937953157882640bf22fac8b16a1c1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d5e2fa8b8232a486ec6c691a7ae79bee

    SHA1

    c8858148086bd5704e0f2014ae8b0c0c53909cc1

    SHA256

    5ccc8d2cdb0a8e02c55b534d2ad1196aeccc2a79cf847c2844a0187104ab3488

    SHA512

    b2e77316e5560f6a93766069d567089477e500621dd7e63d43b6e064ec4c30918313a9cf23860a60b652cc6688a205508b90ceabd45ae8016cf0d48afa673abb

    Download Submit