Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

dee253f018...93.pdf

windows7-x64

1

dee253f018...93.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 09:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dee253f0180f17597f2250ab3fddb893.pdf

  • Size

    90KB

  • MD5

    dee253f0180f17597f2250ab3fddb893

  • SHA1

    92d413a98265abff2be1808bc71f7fac74380b11

  • SHA256

    092f9633255f8eb0cb8c8d2ded43d3aaaac362c3ed5daa3633fa9c8a9e685426

  • SHA512

    3478a0638b01977ba6fbc382519b2253f703bb1d5dede729e6f597036a0d7780040cf80f268013909a2c39fa6c97b63e94796314b691eb59fc178e2817a5f804

  • SSDEEP

    1536:2FaxbRkwBKxTo1SwLYlhl5gACeVeo3BvP6cdhHerJHhKWitUI6ilW6pOu2lwcPBy:a8bRNqTo15YTYjgFB6cdlOHhkUI6iWuN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dee253f0180f17597f2250ab3fddb893.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5ad87d1280fa53d98502504dbb6b674b

    SHA1

    0efbbbbf7505d4bedd5c09935a27666afb369beb

    SHA256

    68c193132ea588ca3c5ef130605019a9acde335ff1289ec6e417b8aa6dff89e6

    SHA512

    07c4f72d155436ddf27d7eadf54e4db145595289d9fe2fbc0148309543a61a95f2d9b7700c3108ae153f6a1dbb2238535cc708415d6751e07f87374279745f3b

    Download Submit