Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 21:55

General

  • Target

    5b172a538a71ac7fcba4eb9e169fa92edfd99298dbb0cc081a91bc31d51f1d6f.pdf

  • Size

    86KB

  • MD5

    c4475c7109b4af089e0121e3bff2cbdd

  • SHA1

    5d54fdcbc2226c83d4d4a41b98caa07b074c3db8

  • SHA256

    5b172a538a71ac7fcba4eb9e169fa92edfd99298dbb0cc081a91bc31d51f1d6f

  • SHA512

    52307a30df5bac99643178e3e95257b6b9e21b70d7b08befcfadf0f3e8e3d1ec5b871fc061d32807595af584c6a0eeed465cd26687f1fedce26cadc4e2dd6b13

  • SSDEEP

    1536:awzAS/4tYhCErXNBUsy3RMqdTOG3fEaJqPmDax4KBWxApOGS1OWcLXoygND:5Q6sCdBUfRMqdTOmEaJqhxY3GwOcyA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b172a538a71ac7fcba4eb9e169fa92edfd99298dbb0cc081a91bc31d51f1d6f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2f70135e3bc00c4c2aba05e2272536b5

    SHA1

    0a8e0ea4ddfdb502707be1c8fdb3facd5b408e76

    SHA256

    93e83e778ead6d1d2da8ceb969ca582787ed5b4ee03bb5ebebeeabc69987727c

    SHA512

    21cfa9b762f2552fd7334e1fc649495a426763d59ea7376b7beab9d50a05c9260d10d7b0a96c4beb252d71e28ed2a7f0778afa0e6da71397506c66848ca34dac