Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
193s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
13/10/2023, 20:24
Behavioral task
behavioral1
Sample
NEAS.571f753f1482479bbbedd16dddf24b40.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.571f753f1482479bbbedd16dddf24b40.pdf
Resource
win10v2004-20230915-en
General
-
Target
NEAS.571f753f1482479bbbedd16dddf24b40.pdf
-
Size
44KB
-
MD5
571f753f1482479bbbedd16dddf24b40
-
SHA1
65ac726b52d8a6bb8bc7e3027766bd31a20b9eed
-
SHA256
ca23a5dd17cd781f16d28c8c3248d86cb1af0e6bbe3244004b96b8dd4d451aeb
-
SHA512
7eb3107195d32a435a66dc5e45654c11925a659d1fb7a76866108174ae9a3fa9d45c6e1e3ba68f458092173b6d16991ed0a6a9b2b1f6097ece0668857617ac74
-
SSDEEP
768:UAs/c/zAvJ2S47Q4vKs/jrD5L9CewgMDfvb8GV4yg78YsRe+on6UjGqytpgvdIWo:S2S477P19nqWZpsYHcKIPs4nuy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2808 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2808 AcroRd32.exe 2808 AcroRd32.exe 2808 AcroRd32.exe 2808 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5aa24cb73f15d62397b276156699d83e4
SHA1360ccc4773a39ac8375a7538b13d06a96ca56c13
SHA25688f1939f52ab9934e8878d2d0214d079fd96798123d3e2c88131f1decceac2d1
SHA5129574cdd1c3ed0d7e63644c732d5606fb6a89a45676a5c3bb9a73ce35e229e50ae0b12bc6a9eae09bd92579ce376d19cef04e55e9a06023097b68af19bcda1495