Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

bc8ac6660a...fb.pdf

windows7-x64

1

bc8ac6660a...fb.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/03/2024, 18:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bc8ac6660aa34dd1b52538653e88aafb.pdf

  • Size

    205KB

  • MD5

    bc8ac6660aa34dd1b52538653e88aafb

  • SHA1

    91e5aee9519252351f59f08f70378d877704cac6

  • SHA256

    81de68b197f2df3844267f537e62f241a669829460287d53a225f67cfa6ac544

  • SHA512

    0cd7647b185cbae535085f592e0c8f6fc2c84d2438dff86e608634953b4baf16be6f4de9a7989dcb6ef0a522553ae5a5cebc5e01295a932710670a02ff3bc2b4

  • SSDEEP

    3072:/J+6bVLtyrGt8fmJMRTsIw+Ygs9X2r3QCUItHUIfTyedO0jMCwubdwpEhDt2/4i3:ASnRtCvpwz0rglE0IfTdYiwKM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bc8ac6660aa34dd1b52538653e88aafb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e8d605f9114e11b82c9751064302506c

    SHA1

    7fffa0745c842f5642273fa3952f4b03a40dacad

    SHA256

    e0e8345b5c93bf510c9badc73fb988bc1ae43c553e464899198d6f89ef539f71

    SHA512

    43f8d9e3905b9668a41936031bb0285c8505093bc5dc1fce5740e6682b342718e46ea962b14b028f73a15fe068f90aacf8758f2e929fdfd32f5bbb0fb4587182

    Download Submit