Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 08:13

General

  • Target

    1f10b929b20f91c1503035ec225137a298dded695fc1f7dc0fee7b5690087a61.pdf

  • Size

    37.2MB

  • MD5

    3aeb35a3be49a793b2074ecfb94ec8f1

  • SHA1

    2bd3b0b5d9087442f8cd909be7e903fab8c5f0a7

  • SHA256

    1f10b929b20f91c1503035ec225137a298dded695fc1f7dc0fee7b5690087a61

  • SHA512

    885dbb49da1d33b839f9d40b5d74dbaea0e4c7c09c9a19e4d61364ce1e8c7c455a9bead4e183b033e866a05333529b5f31beed452e129e064278de2465d45832

  • SSDEEP

    786432:Mh7XqERqOMswdtF4rJSFDNuX7abvA3ODsez6Vh9qDucFJaR2w/eg1KOk:MxqFOMsw3q+pI7abxwu6Vh9qDTFJaRfa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f10b929b20f91c1503035ec225137a298dded695fc1f7dc0fee7b5690087a61.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e64d87a1017073b0e09fc464091248e6

    SHA1

    aeb27b08ad162e860fa72b642575e2be5cc0f7ab

    SHA256

    019521f37be1dcb2a3d9e3dc32cc21c7945028dd8596ac42c6a86fc7830648c7

    SHA512

    d14aeb22bf9b6d91a5cbe06f144a10b5bb0e7d2756cace7c133472ff8cfaa01dc0d560c6afabd1e084b4700b316bae4938464c8536841773c1780995f485b301