Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 20:12
Static task
static1
Behavioral task
behavioral1
Sample
न्यायिक निर्णय फ़ाइल108-21 (1) (1) (1) (2).pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
न्यायिक निर्णय फ़ाइल108-21 (1) (1) (1) (2).pdf
Resource
win10v2004-20230915-en
General
-
Target
न्यायिक निर्णय फ़ाइल108-21 (1) (1) (1) (2).pdf
-
Size
397KB
-
MD5
d354729fd3ed365b5d835f4a87d2e69c
-
SHA1
cc1855b32fe270eb9ec9bff307673ab47146439c
-
SHA256
490d812d1f3c418c47e2f468ce03e77053d351a835d9056fab837ae255221a33
-
SHA512
f836c8bf2591ab9b90c7fe8013dbbe3647c49b2223512d3840a0367e336ff0cd5f1298389fe9874b732ab500330c7164c9fba0a7a0c35a6a16f77d920cb02591
-
SSDEEP
12288:vWpiGw16J0fjRSecQLYLDzHbjMy42esMvQYBiA:vWoGw16GfjRToL5f2ooiA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1384 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1384 AcroRd32.exe 1384 AcroRd32.exe 1384 AcroRd32.exe 1384 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\न्यायिक निर्णय फ़ाइल108-21 (1) (1) (1) (2).pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1384
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d513657cdadd252f4c2f297b324856a3
SHA1ecdcbb0bdfab101099973ca24a52a31a2996c586
SHA256b8b00eb8d6966edad481f1c2f3977de4bb7b77cc87bfe8759ae0c0fdc6e42c5a
SHA51275e7a7ff392e47c0d513cd208e16e9fd0f3e2c4e0f112bd51c5ec3f4fc981f61e63e16ca8bac25c41e33369479cfa1a64105ada00f1a92a35e10dbec60827255