Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/04/2024, 19:54

240408-ymmm5sac45 1

08/04/2024, 19:46

240408-yhfc9saa97 1

05/04/2024, 15:27

240405-svwm5agb24 1

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 19:46

General

  • Target

    ParkingTicket_6332270.pdf

  • Size

    6KB

  • MD5

    a2269935aa8e28d7e8442d3b2629fd70

  • SHA1

    9b9330aa5ebc19e984e0eb843585831a2352b5a6

  • SHA256

    210efdaf5a78c234308645e04cd5dddd0120633498931d71effa02ef5f1b19fb

  • SHA512

    c58d49482276ff640cf1569d7bc6b888810da8a4b43b617cd5080dba1248641cc15a5fb3f4827b5055de68020b8fd5c84ef8fcccadee7d313aef9b1a759e63b2

  • SSDEEP

    192:ypML0/LzmjD3rhNoOLKLhR89THSF1s+kmg4PRHw6:ypML0/LzmjD3rhNoZLhR89THSF1mmg4h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ParkingTicket_6332270.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4b314ed507f1bc6812ccfc4d61d764d9

    SHA1

    dd7ad2ff6ce17219f4b1d7c84d43646eb2e86980

    SHA256

    7cc2f6a84442375132c538ab06c5c3c8355a02b12a75968433046c9d429c6f89

    SHA512

    6543cab4bc01b75aa27c9d7feecdf070d5c4ba1d5ed0afe4492fdb6324d22709009d2d8362f9ddf49afe8fea94c21d5e0946fd096f2be9b1ae3666136bc17719