Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 17:52

General

  • Target

    c139c4be9ddf235c32f98fa04a654063.pdf

  • Size

    85KB

  • MD5

    c139c4be9ddf235c32f98fa04a654063

  • SHA1

    33f58d837f31e66b29cec1b8b24ae065ba68b63b

  • SHA256

    e0af2e3c3c1cf017682b019fcd57740c79d009df07bf74a4e7afe10c868bd569

  • SHA512

    d509ec932f5fb32dd6b1e22ad8d11ae97d9089e3d317f1f9665cc06f3a8f69b86df8e1dba332d46ff61e925d18e94d08d98f1d63c670d90fc2deb71da439d96c

  • SSDEEP

    1536:qpLlm+RVTO4kiQY2YY0/QMh98QxoZkjPi4yp0k8wG4W4DdRmQtkiW8pO7Ckyt:cpm+RVO4kkJ9oM38QxoZkOV0k8VEkJ7w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c139c4be9ddf235c32f98fa04a654063.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a5faffbbfc97140bd77a7d23409ac0e7

    SHA1

    9548c8e318f92a72675484450b592af0df85b321

    SHA256

    6f1c86824ff911099294f35fa5b6587a1751cb907febb51ffb6eec9289e298de

    SHA512

    1049f6543b50e86c735460a7f06f412261383c6538ed9704283e086e3b2d18f43b195f0ef97b48076b12cc739c0ee74760745d1d1c84e39eee0da6ebfdf5efa7