Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 04:27

General

  • Target

    ba8302944762a52051617c11cb7d1458.pdf

  • Size

    84KB

  • MD5

    ba8302944762a52051617c11cb7d1458

  • SHA1

    8c57a886da68fbfb275335a7e56338091877ffce

  • SHA256

    32d7ae5126fcb4102ce43bd76f6d57962118d54ecc3ff3237bc49ce47b50d435

  • SHA512

    1a761d015717f3bce79635bef3096db2fcb74b4549f94079f0e4591b96563fb8faa668983a590814206be70e3b04e584f5998c02439188832e1161fd4faae748

  • SSDEEP

    1536:XhozQ+2sShPjelLFCnOM9g3IXP5ZbJm+Azzj1qHkKOBorPUHWOpOwrKW2n/ebpcy:RozQ+xS8lLq/f9Ijz1okhBorPUEwrM6V

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ba8302944762a52051617c11cb7d1458.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    12afb8b8a9e727cb829b771153eeb8c3

    SHA1

    b4c7e81b79974f46e3639e800b51b23c0bf3ba75

    SHA256

    37983f5bb62baddced6d5d31956c0dfb56bca80e37fa20c6a3ba8e7b27ca3390

    SHA512

    fd6503aad2f9149f69efee0f714ea2935ba6a3a27ed738b92783a6e13f4f5d49d1524349eeb1fecf7d660ae1bbd680f2b0aa014167a590305c17123e109e05b3