Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

bd025466ab...7f.pdf

windows7-x64

1

bd025466ab...7f.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 22:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bd025466abaa1e0c1ee73311ad875a7f.pdf

  • Size

    63KB

  • MD5

    bd025466abaa1e0c1ee73311ad875a7f

  • SHA1

    516458fabbf6bdf6883419f88693c48f536686d8

  • SHA256

    28341073c3945162af5284f4d441bad123504603238d07b4a6ebb52129b6c929

  • SHA512

    ffc80ca1525cd04daf49c12179e621f55b14d1b52d23990825ebb35ab568fc736b87999596a9a76b38c3a087d51be4d651b6ab7638cba2be3396711a1faf6d69

  • SSDEEP

    1536:fVYohgvi6ymnsSJ+lxWSJo6jmtUTf69taekZm+RQyMJip:tVhci6yQ+zDjyUm9XYPRQyMy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bd025466abaa1e0c1ee73311ad875a7f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8485a4e29df4913d159e4c21f851c790

    SHA1

    33d73006a65a99b34d4b9fd433b7483384793924

    SHA256

    5aa6456cbf779ade00e5c6c5a98140a4fbca03605235333f14067dcf59c85cb7

    SHA512

    6daff745815c8407f51a5726b49368de4f169c2750541841c36ca192dc4719d49d77a8dbad50907632b6d56b1ba54525ba52fedf97e9c5468361a90100fd323e

    Download Submit