Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

c0595b32e0...d8.pdf

windows7-x64

1

c0595b32e0...d8.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 10:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c0595b32e0ce8a18db12f718a727a7d8.pdf

  • Size

    77KB

  • MD5

    c0595b32e0ce8a18db12f718a727a7d8

  • SHA1

    f745f51186df7eebc91600a7f58a39015d01114f

  • SHA256

    f4c8e6ae125628dfbc662aa8c7919003e8d86fd7ba8c942215d6e7c18e14ade8

  • SHA512

    98c096e8ccf836ebb5e0bf58f1027f6a24a3ea0479d7aaf385f461038d88e00589a666265c764b53ee04d67b979837ffb5a2e24e7a118981806f49490bf12a78

  • SSDEEP

    1536:6QvmXJ9yy2/p746wB6zjjkEYia4CGAKz1HWGpOKWGnY7LWLLixL2iI4DY/+Rlr:9m5m/hGB4jkEYJ4C4oKWP7gGKiIJ+f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0595b32e0ce8a18db12f718a727a7d8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f464657157b84a0419e5c036803d650a

    SHA1

    a640138f97aa984f50f802e3d9c6a8c65ac59f00

    SHA256

    4acbc3d94abaae0caceda07c5192795c139d65332f5794d6f125667ff1311c4a

    SHA512

    737ee9f943bba8e471884c9dbf19730e872342d0eedee093c53880ddf994f4e329aa091cce20127cb81cb9bf1336fb4982ad4780ca4481dc217a37b429f0d450

    Download Submit