Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2024, 13:55

General

  • Target

    d3ae197bf702647f96caadf5be01cdbf.pdf

  • Size

    90KB

  • MD5

    d3ae197bf702647f96caadf5be01cdbf

  • SHA1

    673140ac1597570771c71f126b4f385aad1eb4ed

  • SHA256

    a1ade8585807dc3e89bd4d35f2ab62f664565292ed9bf2850386303c86c73d89

  • SHA512

    5f632b3f100b015192c4fd92d98b05a8231e6df4bf531fedf0794bbf73c856637327feca77e3499ef598f4edbdd482532b31b21699ed3e70c7bce6ab9a3bb342

  • SSDEEP

    1536:DGiYjsmatHjB3KmBYKC3SbaekzKtNJ4BHvw/eNEQrW70HVEPwHiONWxfDBJGW8pq:C9smatDB3KNKC3SbCzJvwGNECuMiOq7z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3ae197bf702647f96caadf5be01cdbf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a764fe3fa8bc0e37da1f2c420f61a36d

    SHA1

    3bf48c945bb8bde9c4150d4bf1942999f6aff7a6

    SHA256

    63c4b7935ff07d2a5c0c2b2adc3a4615727be16765b1338a3dd75ca75253ed1e

    SHA512

    13459a2386996646e25ea987aa61bb6d21569cbfe86e05d6d4c6656ab47033e4ca8a6432fcc8ab8fcc3fe0a44eb10dbabea235e118d9155acb8558fb091331a9