Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

12ca1dc2ae...20.pdf

windows7-x64

1

12ca1dc2ae...20.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    05/07/2024, 22:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    12ca1dc2aee2084522d98990c2ba1e20.pdf

  • Size

    87KB

  • MD5

    12ca1dc2aee2084522d98990c2ba1e20

  • SHA1

    c56a583bdfb027bc5b86a9b700e711a4dd81d082

  • SHA256

    caeb291afaf7edce2777881c1b754a26beba5a3b4b1093d78b5a135f5cde8d46

  • SHA512

    6ce865fc21c28a733a3a42d62e422ae2f2b6f014adc198f8bf3e082c9dcc8d5c2b8526fdd47e66cb84c95e82a2152ad1842096d0a800edab7f402c123b91acf0

  • SSDEEP

    1536:NrNI1MuHvm4KpUD7Z3Vrbx92HlYtMhbUZIUWCtd:NBaMTpUplltMhYZIdCX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12ca1dc2aee2084522d98990c2ba1e20.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f038951f6b53c4024c679739cb30d43f

    SHA1

    bbe945ed73e3e6dbd496c91272df26e10a831b3d

    SHA256

    035ea0e7725ad07e9ef7006dc34c9d55451fd33f55fc3855abb0f3c87fcaccae

    SHA512

    b8dace7078dcfdfc4fa137a17d969018536590e3106b2e514090d25a91e56a1d804fa460a7be83026daf10dd4cde617ee471e9679968bf416ec442ef81ab090b

    Download Submit