Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 16:28

General

  • Target

    d695c28a9dc342274d2c63f9db5b4569.pdf

  • Size

    90KB

  • MD5

    d695c28a9dc342274d2c63f9db5b4569

  • SHA1

    7a06291957b89fc4844c5d6043284628db8715ba

  • SHA256

    301ffa6a4e1503b3d2c1d2e22e89c75bb60386cef4a31f4d6123cd25ffcf0aed

  • SHA512

    99958ce79c5f40dd4874d3d89166e87b4c640d449c14e39efc1d90a3fe4c4fe3d3f4e8b26737feea83802631d9ed3ffbaf329bff30c529bb9fdc686373580ae3

  • SSDEEP

    1536:/iWyeU4uQnsVZAQBhvFVvWq9anJPkJQ1//oldmEQWCLBebSY4yQwLhzWwpOSmKa:O4uQnEZAWJFVvWq9AJPkJjboCSY4cLhk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d695c28a9dc342274d2c63f9db5b4569.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    05038cbcdaab385f111c75f967426b41

    SHA1

    b5959187929091068891b3d95de93d66ef6cfb63

    SHA256

    78d5f7474888a3768bb0609106d6a98b793f71fb6be8cfbb8c3a1247a1e6e865

    SHA512

    7cf34baf1d17f2f46754442c78036251b77c196c211366d972db7b80456ee1700c2a79f103f3222a24fe09e57367ecd46e40318bc4da977f6ee84ab6d1e3f610