Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    07/06/2024, 20:27

General

  • Target

    Steuer-06-2007-A1fdb2niXU.pdf

  • Size

    218KB

  • MD5

    e515571f790f28a4e9e53f012f9f8fe3

  • SHA1

    b8e9b3590e0e691d957977ac78bb18a8e6366410

  • SHA256

    70497bb38c44c7d6d7a6e155d410a09a211f2d61788e7717cc4e3e2f396c90aa

  • SHA512

    2203e7593f87104267d2210681bd4ae5ad294e898fe7b9a68643794a764411f326ce298b1c52e8271c196b2396c0f8bcf78ce57292b5281af7483ab61765f24a

  • SSDEEP

    3072:sM2K3pPA6Bb1vwHx1OEt/m2AqaOzCFb+fzvCVraVxnboZ7jyR8uwYCNp+iRyM0yd:PxA8bsxT4qLcb+qraLoZHi8uw1p+ZM0W

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Steuer-06-2007-A1fdb2niXU.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2d619a32f9de5f87fff2efb14b5fdbf6

    SHA1

    1e3d1ea8d5cdcdb95797a7e89bcefdb074092b71

    SHA256

    a8babc7570ec04b32ff1661b0a307bc6e0e2e2786bd7f019a791d2230f44ccb9

    SHA512

    5117ad9bb694859ac1c39c0b43d63bb68d3276a7892f8d6df60353b0c5d4fd7cb95466a1d86c340cff990936a07198528d32ce5fba13d04e87786ebe714f0f6b