Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 04:20

General

  • Target

    bfd4bcbe7484a399019c32013ad51ce7.pdf

  • Size

    94KB

  • MD5

    bfd4bcbe7484a399019c32013ad51ce7

  • SHA1

    6f57dad5f58c860e183e8b2d156bbc33a81893fd

  • SHA256

    84c5578ac8e6156d282e81186ef4076b1b2ed4c9d7ac3b002fe3072f2bd94e62

  • SHA512

    a782ff65dcc70a533fc77dbae88fb5de58321555d5af9861a126ed58d14b171c823417ce9ced63153163d327f8a1c6c6cabfef63e0ab170f00f2ccb4c2123208

  • SSDEEP

    1536:mmiP2JPJKH8wOOycljs336DR7T2+KZaTE8SWYpO2+W7/BewE3c9pyNJ6/OaaGw:XhJB/wOIljG36DR7T2pZaTE42d5ebc9U

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bfd4bcbe7484a399019c32013ad51ce7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    22d3e7e4b50cfed1612f174b30e9c4a9

    SHA1

    cc65e0e91fe9279d0a1dbbe669bd477468f509a6

    SHA256

    74c4683e8222138400e4b0b33e78b5484db179e3eed83850bc94da7664ece7d8

    SHA512

    009f31063cc563a6f6908777e572b14084ad27e6dcd03259e46fb519b8cefd04a33a5abe2b6ac3f448290e0445237cc134f301faaecc932f743b45e2e3f258f4