Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 08:34

General

  • Target

    4cc9ca149deff87ca260bbcbe27725f97efe23c0701f84c7278cf3dc2464410e.pdf

  • Size

    3.5MB

  • MD5

    549bca2bd66062e24036cf4ca61385d1

  • SHA1

    cbf2e4dface119616044ed6b30787e888d4a8592

  • SHA256

    4cc9ca149deff87ca260bbcbe27725f97efe23c0701f84c7278cf3dc2464410e

  • SHA512

    88c21159e85737492eea331f4ea312807035a0932bd4e5fc45ab6676a08a31180e8e712d2fca837f8717b2331d1f84c42d2ebf59de8397089a9dce41531ca151

  • SSDEEP

    49152:Tw/ebmJECuFA48gO9W7Bth2j/hqWPTLJC9VisdJJ8ZNK8YmQO8+3t:dbmJiA4HFuj/VEdJmvK8Y7ON9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cc9ca149deff87ca260bbcbe27725f97efe23c0701f84c7278cf3dc2464410e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dc47d00e77b3357a1950248798da7f5a

    SHA1

    d899c675c04489f35d381dfd0115106dd32e7d72

    SHA256

    e2ef23e867ae43598bb8fbdf816730ef5c839a75e4496a4af53d2bac15c98db5

    SHA512

    302fe6ebdc9733a6178cba2b6e880d4c0dfd24cc793dae7095b601bb65caf444de4d745b9ecaef8dff4933ddd9378fa6c98fd95fa2b0194b47259ed3d190c1b3