Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 12:20

General

  • Target

    c9b3ab208850e34dbcc25c984e036728965a241e8908100ffaa4f8458f69eec2.pdf

  • Size

    421KB

  • MD5

    5c9eb44a3308965be9919375ff75c028

  • SHA1

    e7a48fcbc9fb5d586fc41f1ff6daa1dd10d0ddf4

  • SHA256

    c9b3ab208850e34dbcc25c984e036728965a241e8908100ffaa4f8458f69eec2

  • SHA512

    b5d8457e9539554ffd6303e0712ce4e1970e9188925bd446c834b278e761c94c759b096d81e38b4695e6781e1daeb239c1bbe61295d615f0c12708aa04235bf9

  • SSDEEP

    12288:wvnoL8jjiI1bla3y3RUGyhujrCiIhUfQNd69:wvnouZc3ynONu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c9b3ab208850e34dbcc25c984e036728965a241e8908100ffaa4f8458f69eec2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8bd3248f5627aa5983feeedc6f1279f0

    SHA1

    0ee940f7dfeccb47f91eb5f14d848fa16162afe5

    SHA256

    6e7af761f78ed941ef57631b1fca7c0ed5f5ce4f92c2cbe4a1b62b1b7c009b3d

    SHA512

    b95d8e5f76fc402ec08aa6c629074a208558e0ac670bea9b9586127061cfe68d51a364d5615ee4f6695f92722d763cbb6b177f9bb3214e4debef595736a7cfda