Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

08/04/2024, 19:54

240408-ymmm5sac45 1

08/04/2024, 19:46

240408-yhfc9saa97 1

05/04/2024, 15:27

240405-svwm5agb24 1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 19:54

General

  • Target

    ParkingTicket_6332270.pdf

  • Size

    6KB

  • MD5

    a2269935aa8e28d7e8442d3b2629fd70

  • SHA1

    9b9330aa5ebc19e984e0eb843585831a2352b5a6

  • SHA256

    210efdaf5a78c234308645e04cd5dddd0120633498931d71effa02ef5f1b19fb

  • SHA512

    c58d49482276ff640cf1569d7bc6b888810da8a4b43b617cd5080dba1248641cc15a5fb3f4827b5055de68020b8fd5c84ef8fcccadee7d313aef9b1a759e63b2

  • SSDEEP

    192:ypML0/LzmjD3rhNoOLKLhR89THSF1s+kmg4PRHw6:ypML0/LzmjD3rhNoZLhR89THSF1mmg4h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ParkingTicket_6332270.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9e2451d4dc0dda49b89840266912cb2f

    SHA1

    b7b8f95cb4115bb808f34ca0797aeeecb8a5672c

    SHA256

    3738402e2fe8afe45b0f337d0f3d39888119e7b465fffcebd8d0f667d2794cb3

    SHA512

    8c8ab67d90d9e7c1c39caf733a9e92231c6ee77ea21d02966cd61cb568fe560792b5bbf733216ba266980a18a2bd30edac594b08eb90ecf63c80c7e9a6fe9636