Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 02:34

General

  • Target

    c4c18fbfaa316cc2ea6856596ff1398c.pdf

  • Size

    35KB

  • MD5

    c4c18fbfaa316cc2ea6856596ff1398c

  • SHA1

    6854676f6fed9d48447290015c706a2fbb84bf2f

  • SHA256

    a66c209916601aee125b5d1545a5a0b340e24270f9e62c4ab1c930f2ecfb5894

  • SHA512

    d1c16ade308a6ed98d77beef05525f7b473108550793bc88793358d6a56ec3410e484ba74445ea584d97009cf7556e2e71b544e1b55d5783a0e0a683124eb657

  • SSDEEP

    384:OIds+8q+Rr399oSsSfiQvkO1tL5M3572y1pLnBHWPaL7CUSsY28AHQSDOs2nVO7k:7WR7nscNtCoyRWPa/pj8AFPKVOgBp0A

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c4c18fbfaa316cc2ea6856596ff1398c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    31266449d073f8fcfdf361f43df217d7

    SHA1

    11c64fc533cbdc6b9e3bf905008ed4eb5e7876a0

    SHA256

    a294027086604151a77d23e8d031c2d3e7754d3dd998f7008e3195534b7c3d62

    SHA512

    c0beae7003a5ae1753b6842d4cbdd75342567ab94512cd782363b1e2964450f3087aba0d7081366d09e74f401256fcc9fafce0bdc0f280c0f8aba464a9ec97b6