Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 23:47

General

  • Target

    ad968bb09a8b33ad3d8d3c7f6f7101a509dbe956461e8c5c2d35ce87089699f8.pdf

  • Size

    94KB

  • MD5

    12957437afdd352cbb10fd88da004079

  • SHA1

    871db48d3b1fe5e53419aba8314346782ce84ca0

  • SHA256

    ad968bb09a8b33ad3d8d3c7f6f7101a509dbe956461e8c5c2d35ce87089699f8

  • SHA512

    ca415e0ba37b2d5b6e92910e2cfb23c44463729a5103b7f6621b089f6abff78c778ab38b30b2686eb0e000675c0da8f6a0ed3ef9c7f87f76114323b9cc6949d7

  • SSDEEP

    1536:6uZir9KBxE2hX9L/EU25c8T/V0SFnATKWy1q+W35D/wM/T8uUyj9cvGQ0hsqvb3v:6Air9KBxdX9L/E5cI/XNATKW8w35D/wM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ad968bb09a8b33ad3d8d3c7f6f7101a509dbe956461e8c5c2d35ce87089699f8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a8830f141212b9845ede341ce3c6f2fe

    SHA1

    f3c34184904d4a9663bea547f779d5c4eabc1c8b

    SHA256

    e44f31638f5943f440d8edc20027a537bf78a1f53dd2ba35ed515d386d7f4474

    SHA512

    0bca209ea7180e0f1588a256ba92cfc5d5ecdeff69e0d587cd43c1d86cded3c7f72f8545fb45bae97869d19b42fd6d7c5fe6ed5ed17953a10eb4b54ae73b07ab