Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2024, 17:33

General

  • Target

    eed499e9f21b7a5b55a24457bcb06b50N.pdf

  • Size

    119KB

  • MD5

    eed499e9f21b7a5b55a24457bcb06b50

  • SHA1

    a7c9fe3274d2af357afa36dd5503d04f65579987

  • SHA256

    7f1b194f8765b452c79b62dad908aa9466f46a901e2aff6274385de1d5865e4f

  • SHA512

    3a4564d470dc41a61de6316edcffd1ab78dc9007bc54046fb55a1df1c2309b6d250d5c060538d0e24a3266278b58ab50784a741538f36dfad300fe1de143d0c3

  • SSDEEP

    1536:OLhvdA80m3GtfiWmX2RgBkLZavodqVBJ3M37XMOANB7vhF5bnCem7sh5MTLY+m:OdlZ0jIkU/Vb3M3TNwz5DCemoKm

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eed499e9f21b7a5b55a24457bcb06b50N.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2152

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6d08900183e50884ebcaacab2b9c40f3

    SHA1

    b068aba44230d9a029798b8a75f800bcfd5e5765

    SHA256

    61f88ef15906728f95191da2791e58c37177acb2b4f6f99532ac99b0158688fb

    SHA512

    c739ba1a1025646d7743b91c51c00c39cfc13e413fe624a48c6484e7b741d9102df4a266b39094eb52ddcd77d1756de245c7bb241f226ba97453bd297f2cd5a7