Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 09:51

General

  • Target

    北王图纸/1-1机井(80m) Model (1)-北王庄.pdf

  • Size

    376KB

  • MD5

    7cc40258e466fefe4e769602b8ebb1ae

  • SHA1

    bfa09240404a0edc565985bc5f55f9cd5ff3ab61

  • SHA256

    1d09f17451fe7800ee12206de33590d6cc45591aa5abb5090da15b36f3738ae7

  • SHA512

    14eb1e8510ef88615b503eb7389e87d7e5f776b42e1ae8e88483cae515adb7e16521d80e8d3554cb8cebfe38940e8218d66bb8d234758828d33078ffb3f892bb

  • SSDEEP

    6144:+HKl9ascdw5BWWw3D+NwT2nvuijUx8Im5NEUqjlLRlDSC9T7IeiQVE72hbStHGxD:+cgsAw5hID+NuPwUxQ5iVXSChPiQVE1a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\北王图纸\1-1机井(80m) Model (1)-北王庄.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3f977217e0d2c7c28523ff2d3adfa732

    SHA1

    6198a1da21c12958997954dd7cb7ddbc097d93b1

    SHA256

    f8e6bd3d189744d496e1f973e9ac5edba25fd82bf88ec6136810053d5c21e22d

    SHA512

    955dedc89c639af6a7ad1a6ba282ce5ac257613c21d5c60eb05c90360a2891f36811c2a75b2f52dd530219ef4f1f6528e8cfbe0067d40c106cf73311c63aa6ef