Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

c2ecc06c9b...4b.pdf

windows7-x64

1

c2ecc06c9b...4b.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 08:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c2ecc06c9b52125bdfb34f652e8cd84b.pdf

  • Size

    95KB

  • MD5

    c2ecc06c9b52125bdfb34f652e8cd84b

  • SHA1

    77763297dc397d13ec160fd29dbf815258c1ef74

  • SHA256

    ee172c9dc7874e311dd4d1cf7a0c1145769987856423963b445d254ff58e21d0

  • SHA512

    622b8fe61a4e6c36bdf70bba73a5e6726bd69b316d26441d233b20790fd4e66cf71c6484317826204fe9645fca74072353e7a351d854c5a7ad52c2614af8c722

  • SSDEEP

    1536:qb6YCkzKoLaZQKnbORB4i6RVVkg3NVCqzoGPVr9m3P65Q9JCuIWGhFY4ZRqAZbtE:M6ZTo7wORuisVBNVCsdmS82hFRbZbQ7F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c2ecc06c9b52125bdfb34f652e8cd84b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    11e77c9faabd0757a184f33921f9d41b

    SHA1

    e0ab666a8aae05d1052f9376383bac58cce63f23

    SHA256

    3f6aede2d090c79d39337c7e0cc298b2b7678c06358ab23e12fcb9ce4060267e

    SHA512

    5b12be42fa989dbc43047f07f210ca7f26999ec89f0d487f66aaafe090eea0b85882263a2004c16efa8914f33045d391d0deedeb0f007cd3220e9940d8921201

    Download Submit