Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 08:09

General

  • Target

    c563d1a4e93d1c5f740ec0f0562fd6f2.pdf

  • Size

    86KB

  • MD5

    c563d1a4e93d1c5f740ec0f0562fd6f2

  • SHA1

    4ca92d3b0371fe88b2a2af6dce2bdb4452453ac0

  • SHA256

    b93904a0ab55af14ee6d309677dc2685dc6f00619d61c66b94e6b2e3fd89a272

  • SHA512

    8fcfd458cdb82d1528a9f5b5ccc0c9f5c52d24db1edbd5893096d01597d7d08eca1d3fcdc8777a66f6702ca0cccb120d5c35e9510bf58e7e13bcf52c4c56fe3a

  • SSDEEP

    1536:sX9tNEF4vqg7uHZDTtmp/AbHGb0bxbIWwD7cXoVIdDpHW15v4WG+qF0xoZhLW8pI:m94F4vqg7BpYz8+Hw3/Kpp215vNqFhhw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c563d1a4e93d1c5f740ec0f0562fd6f2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8ef6c941796f7f1c9e24464a2511b99c

    SHA1

    de414f8cf9e359f4c1930487b2037dd01702446c

    SHA256

    3d8b78f9706484834239806783113d7680a2e3dcbc5765b15f91e3c4647f974a

    SHA512

    e1b5bc320327603a3d0da45da9e895e66c1cdafd661f7f161dc9dd0cb7147a8aa577ed7229a7fa01e062ddcca992ee6ef946660101322a41e6513f552fb35855