Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 20:57

General

  • Target

    b9a3faa5db3512c23629cd5866532613.pdf

  • Size

    86KB

  • MD5

    b9a3faa5db3512c23629cd5866532613

  • SHA1

    b9587edcb367c21191575fef586eb3c4cf93f29c

  • SHA256

    4bb05e570a7474c3cb09a6db1178a8226f9e531cd79326d770dacc15ca3edd29

  • SHA512

    de7a3628d7a9fd5b96a9dba9808dbfa4f2b86b38c1896e9cd99cc3a072da661006bc94819feeab79c271b31a0f9240b9395796af40d50aa23ba8b832ee98a947

  • SSDEEP

    1536:jO6qJ0FPpxXY/T9P4iLBMCQ/sEZ5Yj0FPJZWviwuWypOlWWxuINAMrBA5oSIHkCr:6FJ6xIBP4iCJ5jPbWflDuI3r+5omo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b9a3faa5db3512c23629cd5866532613.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7d664ca3fcb243cd286901a48fe61ee1

    SHA1

    280a48a87c126e54dfad0624ef9ded1b1e0e2d14

    SHA256

    6b8c372719bcd847072a4c8333dabfc70cbd10b6759e734e146c76d3512c51b5

    SHA512

    fd5f3d6d2e54b27cb0da92072621f5727f1819df90564631fb4c5623d7ff7a18780d1b9824bf9eeb76c38935ebdb98c9f527b09b9fc35200dc8fe4c0026de09b