Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    10/10/2024, 10:53

General

  • Target

    c4e947a1bd2391f5635aba94fc5a4fba28a997d8e44b21231e682213a0c22e43N.pdf

  • Size

    445KB

  • MD5

    e1d1c3730197cbf62c244409a710cfe0

  • SHA1

    8ecb0b81b548c49fc8252c4e3fde13fa56ebcf76

  • SHA256

    c4e947a1bd2391f5635aba94fc5a4fba28a997d8e44b21231e682213a0c22e43

  • SHA512

    66a34cf5318899e3a33e41a522938c06d056666ded7326bc454b08f9d95ccd42ca1c56051d15326e25f83e304ddd1516e20686bf77ae4234abd187d3499b4576

  • SSDEEP

    6144:y/2xt7MXKuut7vyuTrwYu/L8tvP3YJQWzZUNHNAImCbuR9pI5/N31VCZhd/8xmni:FtMXtuR/Xu/L81wK1NteNI5/d1Qh+mIL

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c4e947a1bd2391f5635aba94fc5a4fba28a997d8e44b21231e682213a0c22e43N.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e4b26c1e11296f874d85f424e0e3cf30

    SHA1

    501568a828561d21bb4770605dbb628f4913191c

    SHA256

    00a0ebe235a7818926576c0b978760c3b7f21518b3a901b6329637eb19820c9c

    SHA512

    6a72e9e06e3c0f064272ccd889f4ff55e18eec4bb1d0992d0b063500fa7caef27506597c711c610b589ecedd8247cc79cf5c511c8da52c68bfbb5873e9831520