Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 19:40

General

  • Target

    2256832ec452da955cea81b4a2f820b98d5d99ebe3c715a83b8cada36b28332d.pdf

  • Size

    120KB

  • MD5

    0464338d9abdcb918e2b7aae3670552c

  • SHA1

    b0ab029ece44a1b7c89ce9994c248f481459c79a

  • SHA256

    2256832ec452da955cea81b4a2f820b98d5d99ebe3c715a83b8cada36b28332d

  • SHA512

    cc1a535291d0b8d9ab1395e35c9f6171aed72b29c66c4e9c6d769ba4f36896de4e4a54199bb612b6bf69792c735559a2cdcf3092a05cc38ac05ca3c96109cb82

  • SSDEEP

    3072:YJywTBG9oPDvHxG3VMgzBfKSHiPS7RjSOK6AX/J9sIQbij:YG1ASFSLBsIv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2256832ec452da955cea81b4a2f820b98d5d99ebe3c715a83b8cada36b28332d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ca3d72d77a7c03e28caf20b421466f09

    SHA1

    1ab4fd9bf2e1dfcc9dbc7df82cdf1458d766233d

    SHA256

    a682af3fd18d149f6e3f7e98d71795d7ce136499605f8f27c3bd71e0e341f068

    SHA512

    bb17203262e635e1051edd289e6cc1db1587b6b3e6d0f776f7dbb0a0651e7c59b2f98c966dd707bbc00948b1683582b8a1f3ca7239749e961efc614625f82227