Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/03/2024, 22:55

General

  • Target

    cc77cc3f83a6575fa44e4ab5a281b488.pdf

  • Size

    82KB

  • MD5

    cc77cc3f83a6575fa44e4ab5a281b488

  • SHA1

    b2b97e6d0710144cfde1588d31edd0c5ff219772

  • SHA256

    073e00a6579ee7fd92bad65def75f27f8d44ad097b80042c2356b8931a62702a

  • SHA512

    c9dc3019f09b50cc02cc69a72bca683a567796b9feb553d3309566508f64bb3fd0e8a333181d651ad1ee0726e51293b751fac5982e3c20133c20d53bfabb9cce

  • SSDEEP

    1536:GBfsj1nP4Jx1FdZjXy9QbavylNv8y5YWD+B2q8WhJifc7HGiinLVUF9WjmXmG:IWxMh29fq72WZaJijiinZUF9WjmX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc77cc3f83a6575fa44e4ab5a281b488.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b1668a314ce1f86d2e58619e7accbbda

    SHA1

    f671f6d33a0bb4b86ac93be138f91bc1eb9ad8c6

    SHA256

    f124223f419b9e34308045d38fd6cf11dafbe73007622dc158c62823d9f662fc

    SHA512

    fadaa013a351e623fc6325449b696f580a9b4df0d3149634164e48404a33eddad4cd0ce6b3a53ebd01416b3ac8dcabf3fcf4f0bacaa98184d2e5070e9100c141