Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

c0b556f153...73.pdf

windows7-x64

1

c0b556f153...73.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 13:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c0b556f153cf4fe2bac5a72ccc4fe673.pdf

  • Size

    33KB

  • MD5

    c0b556f153cf4fe2bac5a72ccc4fe673

  • SHA1

    d49ff7692d1f0cb465dc8b60f289ca2ed6363fab

  • SHA256

    1199fcb6d4a5f11c3080ef044f04148ecf7805908fd963714cfa7ee4c342a245

  • SHA512

    f4b2c6d3a96193bf1999b3c1ac1ad20d455ce442e16a60619db1c1b280a88699064ef6727920dfab5e8c7237dde0f4c071fff9a8527c8c93ca098c678019b1e2

  • SSDEEP

    768:yFvxmgCeonIEGSNLCuBAttTKwPLMQmaxHUPqzFeynLw4zdDytx:yFvxSISCTttBzMQXJzLLw4BDytx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c0b556f153cf4fe2bac5a72ccc4fe673.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1c8e3c73bc11f1a4c104888bbcef6d90

    SHA1

    e1089ffc4a72db55d9d6eb34dd972ba90aeb505d

    SHA256

    988a0dff75f6d1122cc4957b063c3f660c2c12f45ecf6ed409eff084a09ad519

    SHA512

    1b5ff225bde245e227ab6245cad5e58fe58b5510a8436236c1342d8a6dbdc449c256975f459eb56d35947017b69d1b6358d1516018b1d4c00d0f78272ef6df18

    Download Submit