Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

d4e321a837...0a.pdf

windows7-x64

1

d4e321a837...0a.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 01:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d4e321a8376bfb910304bd6bafec680a.pdf

  • Size

    76KB

  • MD5

    d4e321a8376bfb910304bd6bafec680a

  • SHA1

    9392163008ef214137d7c842012d149d43f56ff8

  • SHA256

    8d589024605c723ccdbe6db8da654597b62a6b46bfe52f10274c9e4a07f7b624

  • SHA512

    edc163e347b5aa0060ef0033ad8e747f03297ad042cc0a08b8d742b21568efdb5c5bf681c35dc5701eb60c6830c1b5d930c1456c3792a836c38451da6f582782

  • SSDEEP

    1536:InBK0plSrooOFEkxhk703Ld/unM5DBHva+XFBw1ynUr:cSrrOOkxOyB/yIPa8FJQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d4e321a8376bfb910304bd6bafec680a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1eccfb981020f913c266106749a5673f

    SHA1

    f74d7ada42569f168902c3727a52b07fc162b5e7

    SHA256

    c91eabb357117c9f008ab3829b5489b08a4c798f896b8acd3195edd3bc33430e

    SHA512

    a96b67d6dd89aabf94b7ae8244266fde42c8a41a3b572c89ac8fa3a43d8ea2e79d2840a71daa8722a1bf67edecef43ce09cac87caa2a935981f34e19c323581a

    Download Submit