Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 06:20

General

  • Target

    7ffcd974cdebbbe29a404ee778958ce0N.pdf

  • Size

    82KB

  • MD5

    7ffcd974cdebbbe29a404ee778958ce0

  • SHA1

    a61cb6a03f0832e1970fe87958194e6cbe327e4e

  • SHA256

    f3aa4660b90a9f200fa17505a15355ea25340b492fc0b513402d7c5c0fc1a1ed

  • SHA512

    9824aa02ac3bdaaf965704e7b816b26feca0b33206d795e03050f157085bbff16b8971681cda4a9f03929f386fe08fc9f12801dfc2d4f479d88df6f11d81945c

  • SSDEEP

    1536:w5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cBpCTH4zjvTbZfVrDYk7n7s9BwF:MeOcJGORh8SrTyQFipK4zLHZdrDf7n7J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ffcd974cdebbbe29a404ee778958ce0N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6fb3c610d79fb7689275d28e4c32fecc

    SHA1

    04cc663ed07e7a71335673bbc3d2a59154b5412d

    SHA256

    7c9faa4bd8f50d5442b22d20bada38021992770fe10cf84fa6413aa395a3af86

    SHA512

    df14477fc4b1668e95e38700ab1dca3f19de34af3235cf476f0a3b3e4d3da76a79c828f53845d718bb9c66b3d37e64b5803489d041ffcf3c30d2a3a621c81300