Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

c8110d71a8...31.pdf

windows7-x64

1

c8110d71a8...31.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 07:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c8110d71a8f1667910f7eac7d48a6331.pdf

  • Size

    35KB

  • MD5

    c8110d71a8f1667910f7eac7d48a6331

  • SHA1

    f5df301b9b33855ba28738b8ec15fc80a9fd3746

  • SHA256

    499ba61fa1c8f88a936fa299627f6dcd0bf599a7a1da76624f17ebe2a97b62ea

  • SHA512

    44ac794678bc670bd3c877bceb888eadeb13b2bcf8235586bed2ba9e400264edb224a758a6ecd06e27658d15b6fed13f1127a9cb52069529f81865862c44b579

  • SSDEEP

    768:dXytcgAkVfSaQlWp8r0ueHEllz89I/kgJazDsmOyKQc:diSFkulWpxuB8m8ka3s9yKQc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c8110d71a8f1667910f7eac7d48a6331.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d18f410403cfc687cc0ba7c5a18771aa

    SHA1

    5c043804086e7e9acfeea55fbc8ba916117e873e

    SHA256

    c477fb9167cafb85e8a5fe95f8c78b21afd34114679e22dd4f2cb56b205a5be4

    SHA512

    e64faeba858760e49c06f83b7ee282218b088e3bdbca831ffb0f9bcf14f57d530e5446e1982df1ab7707a10e26b1a806a0ed4e6cccb6a981cdccef6b3b48bdb3

    Download Submit