Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/04/2024, 19:54

240408-ymmm5sac45 1

08/04/2024, 19:46

240408-yhfc9saa97 1

05/04/2024, 15:27

240405-svwm5agb24 1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 15:27

General

  • Target

    ParkingTicket_6332270.pdf

  • Size

    6KB

  • MD5

    a2269935aa8e28d7e8442d3b2629fd70

  • SHA1

    9b9330aa5ebc19e984e0eb843585831a2352b5a6

  • SHA256

    210efdaf5a78c234308645e04cd5dddd0120633498931d71effa02ef5f1b19fb

  • SHA512

    c58d49482276ff640cf1569d7bc6b888810da8a4b43b617cd5080dba1248641cc15a5fb3f4827b5055de68020b8fd5c84ef8fcccadee7d313aef9b1a759e63b2

  • SSDEEP

    192:ypML0/LzmjD3rhNoOLKLhR89THSF1s+kmg4PRHw6:ypML0/LzmjD3rhNoZLhR89THSF1mmg4h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ParkingTicket_6332270.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ec247f2cd27f93631392ad1beaa8d30e

    SHA1

    0250d7906cc016855099e464e8c3d4cee8a15908

    SHA256

    206df0b9e040a18f36a39ec5eb8f4dd6d9914c589c56420aba75f0d15d781a15

    SHA512

    3fe8978a962852043e56fe2260257c4d84f3a2281f44fc6a5e982a86d49b4a312663fc950d1658e692dd0efb3307ddfdfc5d066a6d1e1acbfe381a653b822874