Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 01:28

General

  • Target

    1cad5e48b821c174e03cff0ee770d3fdffa7f1aa46e2ee5d47a067c97a71f9b4N.pdf

  • Size

    265KB

  • MD5

    c99105a9e9bf54d34bb3ca161db7d150

  • SHA1

    509cd6b1e52932ac6c89fae05a9c6c827953b7ba

  • SHA256

    1cad5e48b821c174e03cff0ee770d3fdffa7f1aa46e2ee5d47a067c97a71f9b4

  • SHA512

    c32df1f80347ca13da02ef4ce3cec7a1cde7c935178bc85611051ebb30fff0bea5851c76c6853ba7501ef1a39eb6bbe2cc87265a3da7990083ec3596d10320b8

  • SSDEEP

    6144:j+HH3D3h6GNjL7Jj9s6BkduGIm2f5deJEBhIomv4q2i:6H9tw6Bk8AQz6EjI9vT

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1cad5e48b821c174e03cff0ee770d3fdffa7f1aa46e2ee5d47a067c97a71f9b4N.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a821844d6184e8225ac770e5c36b8c50

    SHA1

    76b798cd4e03a8426812487a9b9e04794c011df7

    SHA256

    4669b107c392d9141341e82c6711f2e11cb0767787e96d2f96039b40929f21b1

    SHA512

    ddd98914a40f948097ea4dd4f91fe79b3bf861a0a5fccb5602492c6a0bfd840e90679188cbf67acee2cef6a642900da3a52866114522b3c2c81eca4ba136c481