Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

4

0b204bbf1a...0N.pdf

windows7-x64

1

0b204bbf1a...0N.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    94s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 21:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0b204bbf1a5a10b91dfa68cf3c342e30N.pdf

  • Size

    77KB

  • MD5

    0b204bbf1a5a10b91dfa68cf3c342e30

  • SHA1

    6d467a04919a5334a092c6b09f2707c577756d15

  • SHA256

    356bc182f0f0fbcadc38a132419d08d410a4e23bc52e7481621ec141455cf765

  • SHA512

    0dc8b49efca9d775224e7c8ba284f9eccbccbae394fd2fed95df5a3de4ce6cbab595fe016f83847a806db8acff594ff4e3fac1bbc61f98a1642fcd3549f641db

  • SSDEEP

    1536:VHX5mzsmM6h/slqbm3aiDCyD/W/mNWOxJ6ElEJJzwopynK8ih61:/mzHM6ht+DNkO6/Bs7ihs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b204bbf1a5a10b91dfa68cf3c342e30N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0c955b7a4b94ab4eccac24eaba7fdd0a

    SHA1

    9802677cdef77fd90f50b1cf5bbae9712d51bbfc

    SHA256

    ee5661458a7f607c18488933b586eb4bd42b74ec25de72dc52732ddb1bc6117f

    SHA512

    028fb936f247a2cc8518ca589a08cbaadd588a31317f60df632c88c1ea49ab756f60bdbc86ee2547b589c7af64d4e1ff200500c3fd874cc0ba9bc3fce3cfce70

    Download Submit