Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    16/03/2024, 09:40

General

  • Target

    cdb96e629e7225e446cb08d0c3a3b71e.pdf

  • Size

    90KB

  • MD5

    cdb96e629e7225e446cb08d0c3a3b71e

  • SHA1

    02c430dd0f461c0997c737e89ee0651ae1f7a3d9

  • SHA256

    1c3d6d1e2a04ec12082d82e4876da49e5070e158807cac8f5db9cf920ad70a36

  • SHA512

    cfe48fda9fe04d06fe1d2b3b512abc7aadd47d0769bbd8ab5871d9c1201617764c9351264ff264bbb6b5fe3e699327b1bef24e43cee87cee9365e8291e2d0ba0

  • SSDEEP

    1536:P+rheK0UEwV3LNbnopgS2dCJL15F4dI+Ih5As9Djm5yqVAWf010bSWspO25kN:r1UEKLNDopgS2dKL18dIj7AAjwTV3E+x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cdb96e629e7225e446cb08d0c3a3b71e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cb36eec284bdec5fc820562285c70805

    SHA1

    2272ac4751495c5df71af60013e5a37971374176

    SHA256

    f40dade0ad1af28a7ea3a574dac1ce6406d3c3a0f56d1cff270c5c7fbcad1db0

    SHA512

    a3199b2af644566488888437aef89731eed836c4d1f9d4871e0800be34d909b2142d4dcfc82e0ccd575669d433a838bcf071daae8a4e1a0a3d25e2913edf85c5