Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    95s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 22:16

General

  • Target

    c25bdbf82944e6d68866e8d3cd654f60N.pdf

  • Size

    133KB

  • MD5

    c25bdbf82944e6d68866e8d3cd654f60

  • SHA1

    855636c624767ceed9a11879c6b93e3cba851557

  • SHA256

    2a0f04ba82ad022e7ee8add998986a8d9091b83010044b488c9a0785b76bb574

  • SHA512

    280809496b23dfa2bbda056f2f8dc7c8036f644a661aba73b0d97f29357ed5bc15a8b6d0b37ada88613022aa7977d1a92d46aa669fe6fa87adf9fe9ad64ebf79

  • SSDEEP

    3072:i9di56CLq0yahjnvBmH7m51jZmfpQ+oEP:WdXBKjnvB+mcfpnoEP

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c25bdbf82944e6d68866e8d3cd654f60N.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bc68721f5e12ea89e606fc6562a4eb12

    SHA1

    51132987a4fe58228eaa7255c57a2318bcbf9f78

    SHA256

    a70c7cacb5ab1e956ef87362a6285646382d2ece49fd6683a06f8596547e68f7

    SHA512

    7cd5c19d6060307d0beba4ca9fbb0b97d8841706805271c7807e45a13be6be2f98d91b8b8ee81ea8bdecd29cd185e2ca2013a88e361da7d1d197c8be78f8b10d