Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    26/03/2024, 21:06

General

  • Target

    e018bfd5b58345d9fda835e933434a97.pdf

  • Size

    34KB

  • MD5

    e018bfd5b58345d9fda835e933434a97

  • SHA1

    6aefe9e57487397af94b35f4ca0e410aedb76581

  • SHA256

    f03a1248d4ada9885ed9d132a484f9a7ac507ddf9578ba028c63baf272852965

  • SHA512

    6d912e6c66660e7c715e352490e5c61306633bcf9f7337f0a8e27c8eadb04ea6adac7467971c0bade9f7688e6acb510253a4b577298228683113a501454627e2

  • SSDEEP

    384:qzDowmCSw+D75SKuUWFsEn3RLR5knjCBSjzDOuuJKH33kOCUSRY8UCQoMH2cCUSx:YDowmCSdpQpFsyBLUjCQSuh33DXo6r1y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e018bfd5b58345d9fda835e933434a97.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    40638bc1e0c9f229e877167b31023030

    SHA1

    01e674c6c6fa84481b5afd9bf44d0dc29f27e7ce

    SHA256

    3183192eef50833ebd7ea9458d9424502519bd7e04f84a84c7a4fee43340ecb0

    SHA512

    0202022fa9492ef9078f8478bd7e894973f03cc76006c9646002b6213219491467d8260dd82bffb0e732fad4e385bbb41f12f03ca3e86f2d8f4ffb845483d55e