Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

4

file-examp...MB.pdf

windows7-x64

1

file-examp...MB.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 07:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    file-example_PDF_1MB.pdf

  • Size

    1017KB

  • MD5

    ee7ac8084eeab08035fdcb47bfa81931

  • SHA1

    cec8ad914b1e9db83626b98e8d98512616975fdf

  • SHA256

    5e4d40fcd8b22453a5da2d32533b128f2565f3fc7a4d1647a93c86cdbb4be37a

  • SHA512

    c869ae751e3b12477ad19f67d351d4f3ecd312fcbce41c65b1426e214b6121ac2c74ef360e1051b632ff6809681843737161c57aed73409fa62e48476070f6c9

  • SSDEEP

    24576:kP1p69hiOKGbu2xopr6hCO08T+3ixC69eMvbA+kJD3uJ:A4i/Iivp8BkQ07bo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\file-example_PDF_1MB.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    565930abc8d4e8259e3a0fbc6a6bea5f

    SHA1

    f4a872f972585afebd6ddeacb11e648cf800faba

    SHA256

    cf7780b74273215d05fa6b27603c700eb62eef1266716ebb27da4fc836a163ee

    SHA512

    deb068b96ec4f0beb583eb6adde001c0a537f8ced5b399dfc54018e45e6c78d426bfc2c050a59dd06fa4729568dff5c46e25d4499c430fb9ada77dfc59626d61

    Download Submit