Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

def42e0aff...0c.pdf

windows7-x64

1

def42e0aff...0c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 10:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    def42e0affcf6ee359e665001525780c.pdf

  • Size

    84KB

  • MD5

    def42e0affcf6ee359e665001525780c

  • SHA1

    06422162b853cd9303cc957a682fa1d6c8a328d6

  • SHA256

    bb38c066bce0c82820940b6c9cd36a17e206bf6f859b6f341fc466e5467d39a3

  • SHA512

    401b8c07aa812e816da8f6a5c13599454d2af8ca0996b037f83d4b0efca02e721d5c4cac3f5262bfdae8bf6656af3e2703237abb68613454f6a97b6154e850ea

  • SSDEEP

    1536:V9uYXaXvmxc7IUltqn3iYVbib9YpL1+uG5ALzWrUUYyDJ7ebLLWQpOCARs:zpK+tVbib2pL1+uG4eJ7ebL2CN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\def42e0affcf6ee359e665001525780c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    7430613c5e1fae4ac7773380f16a8469

    SHA1

    24050cdcff071b64d06f578dc3b32d2706070699

    SHA256

    379786b8b4c7fd31ae50a863c30306099d666fac6cccc8ec06183dd3bcbba0ec

    SHA512

    c93acd484196e5e23677a368394d18034e0e879998fd0502f4a03c8ae8a2c42c3e035cc6159db72736d95bb52775e7510ab990aec969c6790872e45195850dc8

    Download Submit