Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

3

3 Person F...ry.pdf

windows7-x64

1

3 Person F...ry.pdf

windows10-2004-x64

1

Daily Repo...N).exe

windows7-x64

4

Daily Repo...N).exe

windows10-2004-x64

4

Daily Repo...)-.pdf

windows7-x64

1

Daily Repo...)-.pdf

windows10-2004-x64

1

Daily Repo...N).exe

windows7-x64

4

Daily Repo...N).exe

windows10-2004-x64

4

Daily Repo...2).pdf

windows7-x64

1

Daily Repo...2).pdf

windows10-2004-x64

1

libcef.dll

windows7-x64

1

libcef.dll

windows10-2004-x64

1

~$20220624.dll

windows7-x64

1

~$20220624.dll

windows10-2004-x64

1

~$20220625.exe

windows7-x64

1

~$20220625.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 10:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3 Person Flight Itinerary.pdf

  • Size

    175KB

  • MD5

    423d33b0463acea9c92b3d92add08d54

  • SHA1

    5764acc21ef559e009a63a9b623caa4f1c8ddd52

  • SHA256

    180bca1f964b60ceb034bf933c9696aa6ccff3779accd5f8d24fd3efe15d8c0f

  • SHA512

    5702b88c2ad3194e1acae15bc8a6161da769de1b81f300033e9596fcecd47861675f72e329c02175adb26e62a7d99b43f673ea3429f56dd4df5d7f6e925b0135

  • SSDEEP

    3072:XtfTjguemghjjE2uvXqbvf1aS2h/WlhEL9XDlOuEeMQN6g2w8k3ixEq1RRHJloh2:Xtf3gu2hfE2ufQf1h2h/WlG+L/QY2y62

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3 Person Flight Itinerary.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a29404ca33532a09ce550d1677beb701

    SHA1

    2c72762aa265cf375a25023beea4837749aaf0f2

    SHA256

    27b8ed32d462c788acc60c7fad73ce6f2dc52012e91bed56cf1804db8e302c75

    SHA512

    f66773445bed21284a21e0f24397105c79e428ecd9f2864cedc74a5de56fa15a4079ff84ca445d2864cf6b5b79362a3b9120a6dbdb3f54b92ab6455520c295ed

    Download Submit