Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

b5716371dd...88.pdf

windows7-x64

1

b5716371dd...88.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 19:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b5716371dd36cf376191de72b913eb88.pdf

  • Size

    89KB

  • MD5

    b5716371dd36cf376191de72b913eb88

  • SHA1

    01cf8fb79c3742dc6b4741531cb1ad76537b269b

  • SHA256

    bc602fe6ec26858aeee1763d1a2870c9d346230519387d3b30a3646b40523b62

  • SHA512

    b0264fe64316617caa00b5e10e902dab72bcb2e68b6788ba53e7d426fd29133e8355ca508516d769642b167bdc92e3785714f7fbab138cf4515de1b7ad717b69

  • SSDEEP

    1536:p6YDdZ+wslK/DFR3OeKbyUdwwSXwju93QjVWnqXqwrE7zGRW8pO7UjU:cY4lcZQeqFwwSQICgnGI7L

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b5716371dd36cf376191de72b913eb88.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f93f15cc8593fd4d13e8ec3f4ed257c4

    SHA1

    11e1f14ddc833627741324a4586ff5374cd62a70

    SHA256

    e681067b3a116af5e7bd85330fd277ec1307e94ea23c3d5b5b6d9d3b47406b6a

    SHA512

    301ffd50cfa32c44912c35b9407934d4fd4404e6d51935ec43eed3d88d8c55d5475923382e88c23f83ab798fb242f9e39432a97057d6801d81f19e49cd57a06b

    Download Submit