Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

b517f92c36...8c.pdf

windows7-x64

1

b517f92c36...8c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 16:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b517f92c36ebfee0af7755f4bd14898c.pdf

  • Size

    34KB

  • MD5

    b517f92c36ebfee0af7755f4bd14898c

  • SHA1

    ae323e8786ec73b22f526544a78d04937a494516

  • SHA256

    ac594ea335a50882956f78afbba68c317705b0cf79dee3c8fa5a2e9e4ceca928

  • SHA512

    ea0de9f7f5be932dc4c5b57e002b84b0dc0d81259d10a2eca2cad6509361801deb74ddbec91d7ce0d1e63050c0b9bb08e3367ec0c3593c3df6ccd99c2de4ead3

  • SSDEEP

    768:1oqGusBJLyc+4+jF6dqMGv5sbVthNf1Ie3Og9FkI7:WqQJLyJ4+jF6veup5ffSI7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b517f92c36ebfee0af7755f4bd14898c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4893f63226fa736a44e1786918e46762

    SHA1

    8b524ac3e6a292a4bf343dc48fd5512d47a2965a

    SHA256

    ef66900469eac68ea60710693d522cf01562ef0bb91622f7385e4bb6d265eadb

    SHA512

    7ed4f335d680d032a4b3b925f08e0972f980986c06d85eea905458f1cee8048adb55d42a45f6151c6f4e617c0881e096d12f833b0acdd449119e896a41426372

    Download Submit