Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 20:56

General

  • Target

    643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da.pdf

  • Size

    944KB

  • MD5

    121e70d295cb05ff711e1a787266317e

  • SHA1

    97fbf6249872eb6d32b03a40fa12beca65081688

  • SHA256

    643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da

  • SHA512

    ecf934c6e4f0c54eee1ec54de93dc8cff88d964340fe0dd3def0f39b1d86123e5ee4e3574fbccb03e05a2fe964f28456bcefba2e9f3a858213c8f92a6c23d806

  • SSDEEP

    24576:Eh/zPuN2g0FC7hqw1ageOt3+2ACNUcFebvit:irPuAqwjyQCuweGt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4f1af1b6efe6ad8a9c81176e8d361b55

    SHA1

    da1910c70a34ce4538eb2a708b5ac8c348f86180

    SHA256

    6973b6b2639d0f87fee32c1f833470fdd11064b22c3e4b65e173646fd8ca2a29

    SHA512

    b3017ad1ce05fbb38a41c43295ed279b12d5ce44787a92c42e8a94b2907a36bcbc0317a803ad1197b9cd3d8f413812dd1403f4992c6e6343474599650c564971