Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

e21752b77f...73.pdf

windows7-x64

1

e21752b77f...73.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/03/2024, 16:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e21752b77f81570cd3cf5d8f8de8af73.pdf

  • Size

    78KB

  • MD5

    e21752b77f81570cd3cf5d8f8de8af73

  • SHA1

    78632d3ec8afe7f99e48baa09d194c8536f5365c

  • SHA256

    44358a645d331b8509d6e4e748e2c4278b30128c056eca95c39e7c93225664c7

  • SHA512

    bcd806a7296408bbe70828827ebfa4fc71e1c4a7e1bcf9a5db501a15a25013264bd204819e8ca36c239808d4e7f08dddfa12d90b02119bbff87feaa15147b521

  • SSDEEP

    1536:Okm1+862c5CuCtq15mejfAsThUvU9mWfzcg3TSGprMAUmi8OzS4lPAOfV:5XUusejIsTh+Um073Tk8i8OzSJS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e21752b77f81570cd3cf5d8f8de8af73.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5f8689908b6aa9fbc9329010155d46bd

    SHA1

    272fa93a917927edb524b14ed388c91bd354a107

    SHA256

    20b50b27d6fbfeee9e583c7a521de2bf741a32432f824b0194c54eedade974df

    SHA512

    5c6d5f38f7adc01ed83d187e1a6deefc086f3226589c89288d5ebea1f830d0f0037fe1784c126912b04f2199babaeab28fb9f921981921effbe69c7079ca465e

    Download Submit