Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

df7c1555e4...2c.pdf

windows7-x64

1

df7c1555e4...2c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 15:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    df7c1555e4fc77d847c59df575e0a22c.pdf

  • Size

    79KB

  • MD5

    df7c1555e4fc77d847c59df575e0a22c

  • SHA1

    7a01a2a1c4afa2ee55cb946f73ca7d14a29446fb

  • SHA256

    158e7243321735c57b85f6cdfb2a88bf4a57bce4433830c4cc375e55942db421

  • SHA512

    ef74aa1d02b5feeb19abb88677d7477f9cf951aeaa2039675ca9c53ebbd0aeab77b05fa77709bf71850ed9fcbcc25354e18c4e3c0a814ef0c58454bafe3969f9

  • SSDEEP

    1536:KzIgYYDJ11RY3ILmln4ZMSmIMOInExilGgW4VMijJTlxWOpOwr0Fy32EcUH:if1RW4mqZtmI+nExyrJxuwr0C3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df7c1555e4fc77d847c59df575e0a22c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5d9ff05d466b0b42f485d8201ed18050

    SHA1

    1bb32aa58d161779fd5ac64c0707984c59d6821d

    SHA256

    68aa4dc8add69838458b03e160adf47f047e39637f6c40df318df0e79fa9a152

    SHA512

    24d804e88f5855aa20092bb5bc3bbcdcca2c7091c6db97503a660f2d0b86d8bb4acded11e54aff0a181252829f0d22afcab86e3541dd71ecde48602f39834b80

    Download Submit