Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

cd0977072c...3b.pdf

windows7-x64

1

cd0977072c...3b.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/03/2024, 03:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cd0977072c236b728382d77aa096563b.pdf

  • Size

    74KB

  • MD5

    cd0977072c236b728382d77aa096563b

  • SHA1

    d71103ae63e02b704759b2e81cddc98f68e76b36

  • SHA256

    3ad611d9b1a0fa4bdb8d63992ddff0fcf39cc7e02f7a7364916d9e74bedc06c2

  • SHA512

    c3557815f96d0819fd6ff26cbe2454c41b6f799c7bf1830d43de6bb429f870036ec8b2ae46656f98a3b2a38bf14557b589a8d59ebc377c7deaed7ef985a73c04

  • SSDEEP

    1536:mtjzfNYa3Jot6Mr4T9qd87tYizLbb7w4y0+u8lW5Ft0WCpOViE152NOt:cjzfI6U4Tsd8ZYizLbbc4N+I9Vi252u

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cd0977072c236b728382d77aa096563b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    fbdaf7c2c09e18f10f845f7ecb4096c5

    SHA1

    3ea409a8e4ebb11068c4e3def815dc86f38ac50e

    SHA256

    c0381c5c4dd2318a2e2d625b339e1e4a8acf7c5032c475d5036e488be5f6d3da

    SHA512

    3d8d945b004173c439fa3086b5910ff240eecba6e6f36c0f1df53841ed5627be9a4756359c4a9e873484ce968dad6f75872e932e21778dfad05a47702d091ac6

    Download Submit