Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 07:21

General

  • Target

    be02f6ca4aec5f4d444fab133f9458cf.pdf

  • Size

    78KB

  • MD5

    be02f6ca4aec5f4d444fab133f9458cf

  • SHA1

    76914c9a6a8e5b56f35d002107874a58c4051bef

  • SHA256

    6cd7d270eb4ea14effdef1a2171b8f5448f552d7502c370cc2932ef37de41275

  • SHA512

    87be1b4e7d09b250a966ef0f94689785ea6665cfbd87b70ea6ce9ecf96de26ae165f9229c6d38b921d24703476ef87b73089d947415e6bdbdb40b569971fedba

  • SSDEEP

    1536:2B6JUQM7SRXau2Ru8dARaYHvpc2veXfTGLbIZohePMCIjOC6mtEN8l:k6HZXKRVARa8vGhN3PMIxE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be02f6ca4aec5f4d444fab133f9458cf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    437d70a3cefedf0728da940a0705c3ac

    SHA1

    61f9ee94974e1f064df09c1c426c78b562b10753

    SHA256

    3094846227a4b8b5dd0fa34a0132181a04bc2e882a28ee4afb7fd203c1be150d

    SHA512

    5f692fe0118be8f80c815c26b74356306bf3f2cc55cf5e37099c10ea887f7c4ff48ff7f01089b93410572b67b348ed1a02161367e3b50cad8a697b0820ee1b8a