Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

4

PERUSAL.pdf

windows7-x64

1

PERUSAL.pdf

windows10-2004-x64

1

Resubmissions

29/03/2024, 05:45

240329-gfrj3sbg22 4

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 05:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    PERUSAL.pdf

  • Size

    279KB

  • MD5

    c9a14a2cc502d6103bfd36f7426f1791

  • SHA1

    3a0fc652d1696c70fa0d36a1a1e715672195a29f

  • SHA256

    d89d173ec42a4ab6c92a3dfa685ad556fc9c46e7d98e1f08666ce910eeccec2f

  • SHA512

    09450fb4accfe42d0068b4e9d273bc98bfafcd21046627945a29b60143f0a39ec2040091ded5da2d5ef9540189810e51c3406685da973b7f5f2872b9eb844d12

  • SSDEEP

    6144:TnSjNDZxjfyjNd9whuj05ICtIDUV+QZUd52mXQDRd6w:Taj2jZwhujrCiIhUfQNd6w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PERUSAL.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c3011c0818144156d80a6ad40e8edb1c

    SHA1

    0cec11e33bb5a17a075c992bff87f21a2da8279a

    SHA256

    7be73014a95fa7bbfdb7c53268f8585c1888b050e5b15dfa01167731878b3a5e

    SHA512

    3ddb2e0595b1b4a6e74924166faed77612a6065f1cc6485fc588a69ae150222ab50c8a1af43a380a90759bcc311571f62409f86cb80e06dfe5baa9c804185698

    Download Submit