Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 08:12

General

  • Target

    ed136bfb17ed5ce24b8d7433f3709accf3d3617b3999a329dab5e68d0e799f36.pdf

  • Size

    58KB

  • MD5

    ab63ab85ac749191ce79e7a555017ba0

  • SHA1

    566a8830443ff8b7aed08ecb0b00b0c23cd71dac

  • SHA256

    ed136bfb17ed5ce24b8d7433f3709accf3d3617b3999a329dab5e68d0e799f36

  • SHA512

    9e94c3385b89debd447b533e543fa76878e621dbf040c68441a8463eceff34a87e5bca9cca278f28df36625233921670df1eafbbbc9b44eac6e8ab9d386b7fa4

  • SSDEEP

    1536:S5JhY8yuBAdkFZwWG4gMzOI0c9WExkIkYhBaR:SPhxyumdk8FMzOI3/kIkYGR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ed136bfb17ed5ce24b8d7433f3709accf3d3617b3999a329dab5e68d0e799f36.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    512c8ddde1d1ae4a13eb7ced4a947792

    SHA1

    cc322198de69d6dba22f3f39f60af13dcab07c61

    SHA256

    ec4de5533f5227b4381a322f577b0ebf203812b4fb9400b9f89878b834c7d309

    SHA512

    c26486954847c0b83ac2aefe1be5bb0e76cfffb45d40516e441d0bb5d3ca5872dcca6b05f39e5a1c2c4fc9fb26279624f2d9168032e7fa8df256f8acb95ed146