Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

e0234dadae...85.pdf

windows7-x64

1

e0234dadae...85.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 21:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e0234dadae25406fc75bc2e8646b5785.pdf

  • Size

    76KB

  • MD5

    e0234dadae25406fc75bc2e8646b5785

  • SHA1

    97d119a0e1bc8cd6c8ba80a713c9c629af9a36d1

  • SHA256

    3941b21e4b39f28f49c1f82db4535e6952700ccae004bb1ba019216e89ea3b8f

  • SHA512

    a2529b469c4d8f1fbae11e4b6947d334989bf5855a564286f108f8c02f4f77978fedc62c2f8b60c2c309b40ce8a8296000a0553b760aa7f1048eabd3157a9db8

  • SSDEEP

    1536:JNSTo5+yISVsDFrj5fwV4afsFPO9HE6kXplsHY9WjPtr0WsKfl992P:3+/p1Bc4xO9kLXXwY9IPtrwMlG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e0234dadae25406fc75bc2e8646b5785.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1b39b30aa5d8e8ac16cbf4cccb6450ea

    SHA1

    d5f0751d925d2a6d64abee64aff862734abef8b3

    SHA256

    06b5fe8650321a0a0a44c776049889de37af11e967a1517228679c128fc143b6

    SHA512

    9191adef2fd9435246c660e13affb76330a32949162f0f3c9c98bd051db783b7f47ad9b63514de222c976d9bcf6f098937775193de615d2ded93834d5fbbe3b9

    Download Submit