Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
01/08/2023, 02:08
Behavioral task
behavioral1
Sample
1f7ffb0a6a58be3ea87b8604e61ea0bc5372cfdeabf8f92efab2371e42e45338.pdf
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1f7ffb0a6a58be3ea87b8604e61ea0bc5372cfdeabf8f92efab2371e42e45338.pdf
Resource
win10v2004-20230703-en
General
-
Target
1f7ffb0a6a58be3ea87b8604e61ea0bc5372cfdeabf8f92efab2371e42e45338.pdf
-
Size
235KB
-
MD5
ede339007fe74df17f40383dbe239e0b
-
SHA1
06f3ee169180266cf6b4425eae785dc6295aa7ac
-
SHA256
1f7ffb0a6a58be3ea87b8604e61ea0bc5372cfdeabf8f92efab2371e42e45338
-
SHA512
20d9f4aebfa0d02826455747416a6549b4d8ca4c41a2dc24fe0b46667d957b113c676ae4d51bd7c65cf9f00186094d7e665d769aade7385e7d1082a369d73719
-
SSDEEP
6144:l03ahoiZy+vUsHvfenYBJq+xTmRclWlV3MOuEz7wn:63ahoeZHOYCaK/VcC7wn
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f7ffb0a6a58be3ea87b8604e61ea0bc5372cfdeabf8f92efab2371e42e45338.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c887f93c1a38db2e008ebce5e374f8d8
SHA124dfa5d3b1a76c8d8e9d48382db3068b98d6f441
SHA2562aa55c37649a574d5ba2b7fc90ae50fecf213ae5b6b0a99957cda06f9f34e3a8
SHA512680e37d1e096da0a317d05c829d616dfcc3a3f4af0348388f7a6a17a026f966ca252a18812db3df6617a5d0f93b57fe9ccee9c74a2f0550bd4b5404bb9b576c2