Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

c4b598f1c8...28.pdf

windows7-x64

1

c4b598f1c8...28.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 02:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c4b598f1c8c9ae99e77dc96eaf4fc528.pdf

  • Size

    156KB

  • MD5

    c4b598f1c8c9ae99e77dc96eaf4fc528

  • SHA1

    fba24653ff18b3e15fc9d7503988ef399d43eebc

  • SHA256

    e3ac0d2ccca882afa4bcaa3cdcdc2d5e71c4d0cbb9d5a595107591ca24f447a6

  • SHA512

    95ffafa743db3701595a0bd222013f748ce3ec01c309bbd4c2517746bfe8202be2b9949af284690a6b556b2b5d0607b27719eee0db054ffddf7094066a466e74

  • SSDEEP

    3072:3Jm8TQBTzg+QCG1oC1587RvgX8Ej8DZQzZB36w0miUjE:3tTQB4joC1581eQdQzzRQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c4b598f1c8c9ae99e77dc96eaf4fc528.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a3bf90a41e95a318f780566f9fb34079

    SHA1

    d35b64ed0bb93bc0dab909b02387469392566c4c

    SHA256

    2205232cb9c341b3334a830e130814f4a0b3b5422b03f6c919db23d315229e3e

    SHA512

    137c353a5637cfec41e1a8b2950a650f41a817f15328b838d993713c7f803b67036ae85743bbebbf72b72e028a52e62f0a2d0fc45917f8f8d24da122a64dc791

    Download Submit