Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 12:49

General

  • Target

    b4bbf3da07a9d8d49eb0973ba7fef05e.pdf

  • Size

    83KB

  • MD5

    b4bbf3da07a9d8d49eb0973ba7fef05e

  • SHA1

    f91e5b441a03555309a85cfbda75c384b3f67f6a

  • SHA256

    62163b506c98965abfdfb06e6638780340215519a3a2a65624559f1d7ab742b0

  • SHA512

    70374079b7ce74be56f69d60ea674902816bada9222a325580203ff246c580aeb92f5923c485d5bc950f24b527332663e26b058b9c07eb50274c6170cbd561b7

  • SSDEEP

    1536:FllKfc6wdEDuCAotYxWMbB2izwLV3vFCSUWQt/mHr/WYpO25k+vsEWamo8qMp/L+:jlEDuC3CxP12x3tCSKr25DvsemT9S

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b4bbf3da07a9d8d49eb0973ba7fef05e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c89b5f06fc39fbc040841f95c8a0f3c4

    SHA1

    99159159e98d0de5367c91da39625cf5c9216c70

    SHA256

    3931ccbb7ed96b191617a611f41167adeb3e806055318b4f4351276274f30f4c

    SHA512

    373c46b4fec6b9b58ac872ab9ec96ec25356848bd89d016bb0a20d77700a77628f4d545ca32afd2e7921fd254edb1884801559e46c8fe04a12da32c8c9789483