Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 06:57

General

  • Target

    bace7f281a5d9c0cbce6e17dfa42f51a.pdf

  • Size

    39KB

  • MD5

    bace7f281a5d9c0cbce6e17dfa42f51a

  • SHA1

    b9be914c6ac937d841be038209e96a2a376c05c8

  • SHA256

    fc44b9e4f7f84609ac82125067090ea6a3698d7ec1496e3b8368551e55d9d62c

  • SHA512

    92159ffc3c315e95e9fd6927241054d46c45c39e5888cfe33d9262748653ac2b7c95048169efec05badbaf90e546d66a217b3441719601cb107f268e7fd05214

  • SSDEEP

    768:PALUiXv2D/TMz2dDO61p/R3yAHAGwdhCmzqfZRAX:PfFDrMz2dD7yvGwdhCFAX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bace7f281a5d9c0cbce6e17dfa42f51a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8101720e749af46110022d45c18d5d65

    SHA1

    31b1cd6dd24f9d892f1723337e5d9b80b7406606

    SHA256

    a5bd71db4dbab636dab19ad11a987fdf82dc39800566430b86505fdb14c7905f

    SHA512

    7003e9ecc0564c763e5bc5127040da5118e1f98f27f9e2b2834cfe01fa4057b9e6b6ab6ae061235232cd0c122acc95ded28b5fd2039ea820d3813952d450860d