Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    193s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2023, 20:24

General

  • Target

    NEAS.571f753f1482479bbbedd16dddf24b40.pdf

  • Size

    44KB

  • MD5

    571f753f1482479bbbedd16dddf24b40

  • SHA1

    65ac726b52d8a6bb8bc7e3027766bd31a20b9eed

  • SHA256

    ca23a5dd17cd781f16d28c8c3248d86cb1af0e6bbe3244004b96b8dd4d451aeb

  • SHA512

    7eb3107195d32a435a66dc5e45654c11925a659d1fb7a76866108174ae9a3fa9d45c6e1e3ba68f458092173b6d16991ed0a6a9b2b1f6097ece0668857617ac74

  • SSDEEP

    768:UAs/c/zAvJ2S47Q4vKs/jrD5L9CewgMDfvb8GV4yg78YsRe+on6UjGqytpgvdIWo:S2S477P19nqWZpsYHcKIPs4nuy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.571f753f1482479bbbedd16dddf24b40.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    aa24cb73f15d62397b276156699d83e4

    SHA1

    360ccc4773a39ac8375a7538b13d06a96ca56c13

    SHA256

    88f1939f52ab9934e8878d2d0214d079fd96798123d3e2c88131f1decceac2d1

    SHA512

    9574cdd1c3ed0d7e63644c732d5606fb6a89a45676a5c3bb9a73ce35e229e50ae0b12bc6a9eae09bd92579ce376d19cef04e55e9a06023097b68af19bcda1495