Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 11:21

General

  • Target

    b89e0fad58126291fd39e57d070f9124.pdf

  • Size

    83KB

  • MD5

    b89e0fad58126291fd39e57d070f9124

  • SHA1

    5bb1733eb463c9ba57b44e22e710c3a6364e207b

  • SHA256

    9f3e359bb5fa9ab0f7544ba922978b854d6d0cbdf580fb1a62db2be148af88fd

  • SHA512

    2aaf3d87e4f518cb94d3077c7ab91d66a598c61f82137f3f25af96fd337e44054e173c4ceffcb19f3496c1a6d3226adaa2383a31843c2e2b34006ef704429fd6

  • SSDEEP

    1536:EAFB43gEDg6bM423CnpZtiswGB6iVLfNFshag9WyF0ai07a/mCj9C1WspORkQc1:v43gWF23o3w9iVMhagrWRWauCj9C8Rc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b89e0fad58126291fd39e57d070f9124.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1e656dff3ceeb414fac2b1a1ecea3dc9

    SHA1

    9a808e21d7c3d9205e565b30a145bcf3a1cd125a

    SHA256

    3a1daf7310a7a0781e13dbadb2e02b2a8cce3a2af8ef75aa121afd46c5b4462d

    SHA512

    e097141224531d02dfea167a13cb6db0c0df526f47efe9de0d07e91cb548befe8ed61eb1fab2ec113990ca5e74cdd663713162b3a3c844f8988f6b6013ff203a