Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

e060c95240...3e.pdf

windows7-x64

1

e060c95240...3e.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/03/2024, 00:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e060c952409fe9838b5e6bc8c666b43e.pdf

  • Size

    95KB

  • MD5

    e060c952409fe9838b5e6bc8c666b43e

  • SHA1

    59c1795c52dffdb233eb2cc30f06ee456dd32c00

  • SHA256

    6897c4d4a05e1a3f391a1300b3d7d41914375d789c520c31626f2b3660f40b73

  • SHA512

    a14b0e20b6af787923c0158d5f9b47e4b06dde1aab43565f8341722c85d0dc0a876cdc30e764b548686c6f22e95cf90bdc3d130cd4a4da2717e1938f33a7a6a6

  • SSDEEP

    1536:wxVOwlxrJkA5S/8FyJg7R/r5g/GlifTqP7q9iX+f9bM6CzAB45hXVW+W/ivAkpWv:GxfS/8FyKz5g/aIA7q9lCzAehXyi4kMr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e060c952409fe9838b5e6bc8c666b43e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    cf4897f7a38ef9bcbc727b67c79d7312

    SHA1

    ea57d9e90b7835459ede201eb5e2a3579b7c06c7

    SHA256

    f3483e6fc46bc10f40d1458bf08b89ed30f9e13c6be0a830ff13891df3998e9f

    SHA512

    fc5696a13e61c4f615f22f3250d7023f8017761bb6aede7755921fd09f10a146e259bab1ece492de6373876fc78f1752b7dce53632f6b6139cc0891f06d86dc2

    Download Submit