Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

36652179_m...an.pdf

windows7-x64

1

36652179_m...an.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 22:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    36652179_myAIDA Urlaubsplan.pdf

  • Size

    205KB

  • MD5

    9e1e867af6b9ae98c799a2152cf4d268

  • SHA1

    de6ebde968a04e49f1c23eb189eb8a2486c1f9b3

  • SHA256

    16feb3c9f05a07e0b9f14f87e94bfb20f99f34d48e4d3a06b0601f2eed0ea6e4

  • SHA512

    839e2cd40dcbd99a7254e6905549e95c6c532931a460861b1c052a159f3325611d42b393f09937c00b68376fcb9fc77e2947fb5e6e865d74028bc02ba53d39ff

  • SSDEEP

    3072:ZaBtGNmx3xnrLwVufuGUxsD2l9Z9asJ7YPehEKx2bCmd6GTrIJRnqyM7cD:Y+0n/wAplDK9fasJYMqVhrUnZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\36652179_myAIDA Urlaubsplan.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1ef8471a9aedab90235649a1125c6de4

    SHA1

    cc7de10dc0d79d97a645b0e8cc8c6d3ca3e032fa

    SHA256

    58de9af402278de246238bf7e0e2e8822beefef5a69757b0c8e77f41f5fb0e8d

    SHA512

    13deba3a6a561a664cb7ba1cfdb8a470f82e96860c132e27818ff3e7af943a8525e1078a171cfe69ade3cb9d095d92b26d6ec3aa8c1b1b4d8609a7d0d4603b84

    Download Submit