Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    01/09/2024, 13:08

General

  • Target

    d3c5b5a0097fd3fbac9ca58115c72f214a67a8b53d031a475d63bcd86fad6ddc.pdf

  • Size

    81KB

  • MD5

    c9b0ecd301c1dbed6904d63b2ff7fbd5

  • SHA1

    c654aba70e3c82f8534bf82085e5aec41463ba87

  • SHA256

    d3c5b5a0097fd3fbac9ca58115c72f214a67a8b53d031a475d63bcd86fad6ddc

  • SHA512

    4497e83cfea78dfd83630eac7942f2f8db1db1bbf41ce3487502a87234cd0d2c3a534052ad325870fafac9bb4bb708dc2cf1640019a99afe03033788d54cb064

  • SSDEEP

    1536:08vSpcvH7nkod3eaddeiiNEhNRaTA4AhAWKXdEUZWbpONiWyIiCoc8bHu+V:nSCvH7nkoteUdPhTyA4Ah02UbNEPi8bB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3c5b5a0097fd3fbac9ca58115c72f214a67a8b53d031a475d63bcd86fad6ddc.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    321a70085175a2a47ca891bdc07c36b7

    SHA1

    e7e157d04ad75eb940f792f5b275c20738b4a043

    SHA256

    2db81a1a6e4e57b45c5a17ffdaaa3598d79f649033ed376433124e4b4603ca28

    SHA512

    ed9d105219a19a235ff4f53eb31185f2ce63daeddd528a4232b99d72c9a6e8f28ddf36834559132e8fe5bd9be982cf7b2bdb672cf7d4a39f7a8d767af27109e8