Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 11:25

General

  • Target

    7deca4cb7809379963d03b10cdafcc50N.pdf

  • Size

    136KB

  • MD5

    7deca4cb7809379963d03b10cdafcc50

  • SHA1

    d4090f9e6306ee3f94da47748f15b534ab8a4d6c

  • SHA256

    c9d41c1e3eaa78a0550598a4fef45ff119ff14eb141b5bd3acea61a2c304e80f

  • SHA512

    bc93d2c71cd05f4137e04f2efec76d8ff8c6959a83dabae6b106ffb6efc0cdf38e83d36636f4bfdbdcf58db38a385c5fba0810995871e3056729f19525cc89bf

  • SSDEEP

    3072:opUlRSRbHMnsYEnJRuk5Vt0cRbiF9HSAyQIb23sM3:R3IHO4RB5Vt5QFFt78m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7deca4cb7809379963d03b10cdafcc50N.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e908ac9ceaccc2315245ebadf7cc7aba

    SHA1

    93f9dbe0582031a2244f59d5d0669bda519530f6

    SHA256

    de79cbddf539aefc2ef2c4a749dbfb313217a5dce5becc39356f137495614071

    SHA512

    3454f432fd0b5900da16e4ed30b158eeca1308be77233fbd7c58b76fd94906fe21369f7c92c9b129b264331154bd754722a0bda6a87506a30c2995c6671d259c