Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    01/09/2024, 12:52

General

  • Target

    e057b0f063c0094c6bb31d2a01d3598bf1f709f90c3a4443dbffd71ebcce1d97.pdf

  • Size

    89KB

  • MD5

    b26e8396fe2e85540a6367bd102a5b3e

  • SHA1

    201cf891824356b95384280b0087551cdc30b494

  • SHA256

    e057b0f063c0094c6bb31d2a01d3598bf1f709f90c3a4443dbffd71ebcce1d97

  • SHA512

    c2597c98a868749a4cfff051d50afca75e35d55aacc2165998b0d1490e3a1de119ad610e649c4796facba56e64fa8bfa39967b16fe19f988a19b568fa5cc5f41

  • SSDEEP

    1536:Hd9uMEyns0EC/snln84I8Pd1y8nqwJqGYxL3ueIsudn3fxKdY4ghWznSbN5rjpWe:99ua4C/mm4h+8nnYxLuaudn3fL4gsnkT

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e057b0f063c0094c6bb31d2a01d3598bf1f709f90c3a4443dbffd71ebcce1d97.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    164dbb9d3815a5aeb1d393cf8f9f099b

    SHA1

    7678168a0fdb933afdb6d20f2f3eaf88ccda5bf7

    SHA256

    ebba0ba896ec78c33c7f4f904443b06edbfae1b03f6231fa1d01a55f033f4e64

    SHA512

    8c4d624096f5c3ee704ae69c83a0a0b9adcca052dffd200185f5272cf3c52ddb40c1755bbf2cec76590473bae9d04dffbf985ef64d9b060e9cb98ad0b92103fa