Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/03/2024, 17:37

General

  • Target

    de936eb29479fb493b0f18a6c00477be.pdf

  • Size

    46KB

  • MD5

    de936eb29479fb493b0f18a6c00477be

  • SHA1

    3714b189e626c37a66c6b0b1d7fdf430a7046878

  • SHA256

    98b53f919cfda51ca62b3a4a88f148f4221f75b86e4f46bf2270c301e6032f5f

  • SHA512

    6d6d65191dfd7f94e931ecb41fc5dd30f96a4f97035d6509cdabf99c9233175d4a0a8d762b31470f7a118d71a6cf313ee9adc73ce06dc9e944b95ef0c1e75402

  • SSDEEP

    768:iWEeoWISu67K7uAxdXPyyI6iVHMmHGJTiu1J48u76YNxqDReR1vORlMdRdEyuTW:ingTuL7uADfyF98iu127NqDsR1vORlM7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\de936eb29479fb493b0f18a6c00477be.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a2b6a18f39c27e49b06df503a1a2d855

    SHA1

    e8a41770b20b5f22050169bcc1c5806d303c0fc1

    SHA256

    8bbb24aa9c43d9c21a43bc8aeed346b873dfcd846e5fbae17a00061981f21cb1

    SHA512

    addd8bd546634a01ffcd00c38f29814091b26f4be7571c14ede96b665e2e87c09d66c6f2e625a9b8b5ae97ddac1d6672fbb5fbdf245d1f26d6fc4f531e3b1948