Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    94s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2024, 06:45

General

  • Target

    c44476911c53bde953fb6b2d8ee09200N.pdf

  • Size

    89KB

  • MD5

    c44476911c53bde953fb6b2d8ee09200

  • SHA1

    aa5c5579568a8c702c795282712ff435f505b176

  • SHA256

    5c37bf692d63e518353f1f3851c12ce7f41d0a64d7a8b4a7521f7f6c6d6703cd

  • SHA512

    fddd8ac340b27354392dc65930368379e2f1d0db862b784caa9e6b370a8866a63a33732e655f8b9f6549362f1dbe6bd5eca5923113e3157fa11b82b6855c52cc

  • SSDEEP

    1536:Ff2G4VqyTNZ0HzMGWk1MeJGbApAA3F8aDzHjwBW6pOu2K7BvHYWegEA+Z2sGPt2Z:x2GPyJZEMGx1DJGbAqA3FLzsiu2E/eg2

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c44476911c53bde953fb6b2d8ee09200N.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    794f084dc8187f4295fef29e14e98b88

    SHA1

    d55ec1f6464dce13e85308f465b44357c59022d6

    SHA256

    ebf56a9573b281baefdfec239e923e15929363183c22a68fd8178d8a88775bff

    SHA512

    97e48f6429b7b70126e3f7f51920af2a35b46437d91262023ebf2e727c418c4d91a208888d5334773d03fd996159fe83f6634ea9083fd56ccb69d53cb442e8e7