Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
14/07/2023, 18:20
Behavioral task
behavioral1
Sample
8D8089F9-4951-4697-972D-E2950386AF52.1_attachment.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8D8089F9-4951-4697-972D-E2950386AF52.1_attachment.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
AUTO-30936.pdf
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
AUTO-30936.pdf
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Informacion_AUTO-ASEGUATE.pdf
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
Informacion_AUTO-ASEGUATE.pdf
Resource
win10v2004-20230703-en
General
-
Target
AUTO-30936.pdf
-
Size
7.6MB
-
MD5
36984fd0af5e47d5a2a54cd52247baa5
-
SHA1
bb01334d21158d7fde1ba8c20014f94b8be41212
-
SHA256
5278d96b96a67a216e0388cdbc6a3c27236defcffe02917f7212970e188c4781
-
SHA512
42010b0a5fcf1b896f007cc8077645a543ae83dd5c9e7b7ec01a54c58b65420dcc1773ff81614655719be6f233827114bc444ee62111a84381d420dee2c5e94c
-
SSDEEP
98304:RoXoeCmQP5wVX9THdn9MQvloeCmQP5wVX9Eo1Hdn9MQv1Hdn9MQvEQqT2m9n/BoF:RCWmjNTHdDWmjNEyHd/HdHvm9JoZj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2260 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 2260 AcroRd32.exe 2260 AcroRd32.exe 2260 AcroRd32.exe 2260 AcroRd32.exe 2260 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD594559171d4c40c4c27c3ca0145a7ecff
SHA15e16e08722484f0dd8c5df88d7b3a909e97a04a0
SHA256ee00e616ec1f627f47cbc1558a73fe135b6f3269555b35c3e0b3c440aba37a9c
SHA512030dbbadc82908c5773a01f37f1d4c83c2fa7ac51be38ed6de1cb4ccaf10d6d0c8966399133d0ffcdc1da22295713eaf5fd64a75d19c16ae0821d8f66786dc6e