Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 11:53

General

  • Target

    be8b0c7ca7e73dbd8c465ddd8e3d91cd.pdf

  • Size

    84KB

  • MD5

    be8b0c7ca7e73dbd8c465ddd8e3d91cd

  • SHA1

    c844a7050231d8c56d0be107d1486d021bbffe9b

  • SHA256

    98d65e677b8683575a8a07ea003c8b293987a0d9db5e58d6fa59545a7c319c69

  • SHA512

    c23dd54104fb53fbe27ca96b511fb8b0988312ec803274eddf923013cc961efbee2b85ea2e76bc99cbbe5b8fb8ecf474fb7c6e2243567cf9789cd2536bc6c4de

  • SSDEEP

    1536:8Ug+OKGUrddaBjTODEdUz25g2FTNjl0c4Wf3waWaihG8GF889Yy7WUpO79tdXvbl:e+OKGURdaBjTODEdgkfdNjl0LWI3jN8w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be8b0c7ca7e73dbd8c465ddd8e3d91cd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    96209815e3cac423edd264a21176f984

    SHA1

    1af448bedcd996160867db55070c73b10314c43d

    SHA256

    598c07d208e64af24c3132ad455ed86e2800b4375fe3209d1a6de5eadfd8e2cd

    SHA512

    e7b6cdea117e88ebfef2f571118862eea1298afd6a0c6c8804b007c01acc51fe6fc1d95b3d5e5b15e6bd98d1ec816fa0bb25c8a86faa0a4da033ba99a95d837f