Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    13/10/2023, 20:39

General

  • Target

    NEAS.c96a16bcb858e31cc9a66da9d0c878b0.pdf

  • Size

    56KB

  • MD5

    c96a16bcb858e31cc9a66da9d0c878b0

  • SHA1

    59f77cb356debb464792bed320a5eb964a9b5eb2

  • SHA256

    f496c49406b7aba0a80efd5256ad59e74c615680f913fdac2ecefe07a15257f4

  • SHA512

    b5f8b91eda39c7531dd83a2ff122c3ad15b8ab7a648cf54814d77af1dd7870f996482b9c2fe2c71d1f584ebd72002eaf27cc345cf6ae54615592be47d4f7f3eb

  • SSDEEP

    768:4As/bOKJyNR7OX/PI5Ju9b/FGjXCKQNDDAvG8YVJyk7CYkRt+GncUEGOZmAjjT6w:kPCRpJbGCz97oxXjC4JrgfsNSO9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.c96a16bcb858e31cc9a66da9d0c878b0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    937e20b02360a152a662faa2190a5843

    SHA1

    4f5fe88ff8bd74d058d5fc97b51e4be75c7e867b

    SHA256

    703c47a7586650f03150b8ed65215996fe7983989a8f006730adb7c2573a0abc

    SHA512

    3822c6d7a501deff9d53073edda12645477ecbbf691f2d2216665c1f0587b481ff8040dd733e54d39209bd03b8ab350322b16b7ea4bfe419b14f0f38b0037e20