Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

94d126e659...1e.pdf

windows7-x64

1

94d126e659...1e.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 00:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    94d126e6597dd1da89d6adf0f79d20594c93c987474bd17fbf11313b7f4c9e1e.pdf

  • Size

    410KB

  • MD5

    a46f77f49a3797ce5b115d2d774b7565

  • SHA1

    ca18f4b4b2634a28d14c6dced7834d31a8d5f136

  • SHA256

    94d126e6597dd1da89d6adf0f79d20594c93c987474bd17fbf11313b7f4c9e1e

  • SHA512

    3ff21fb33fdcb9d2f9d38b6e86e95b3e0af315fd3926827186d79dd016c3a4059dfc5c2afd2d310b468bc08c842d73a6d6e67304c1ec5c3d5ab279ccb2e04f5c

  • SSDEEP

    6144:003VS8P7ydDKWlpEB7uF7MBGlQ0meJ1zKslXUCQfJt8xKvt+13:00lSEO5lO4s/ebTt2Ju4vt+p

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\94d126e6597dd1da89d6adf0f79d20594c93c987474bd17fbf11313b7f4c9e1e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    aa0e4fcaceda616098efe6b805db7676

    SHA1

    8ca9213b0b22b1c1c181fd60540f2e9f3cf7a9f1

    SHA256

    4b83c3ac5cb7ad6d351aad950ad8c8f3ce0ad33350041b25d81efe310b5d81b6

    SHA512

    6b186ff72ad76119bb622866a16f34ec2e1866bf75337c1472efe41ecef960353cd665ff72e88a02512901c7bf4f94576d07185dad846aa0563bb9bc48cacaf2

    Download Submit

  • memory/1700-0-0x00000000036C0000-0x0000000003736000-memory.dmp

    Filesize

    472KB

    Download