Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
15/10/2023, 10:56
Behavioral task
behavioral1
Sample
NEAS.4f425b308ce55cc08f6d40df2af590a0.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.4f425b308ce55cc08f6d40df2af590a0.pdf
Resource
win10v2004-20230915-en
General
-
Target
NEAS.4f425b308ce55cc08f6d40df2af590a0.pdf
-
Size
108KB
-
MD5
4f425b308ce55cc08f6d40df2af590a0
-
SHA1
213ca0a05268062125230bebe2a4051411c818ff
-
SHA256
f5fb734cfdd1e91f43e521be5a028c5ea2fba02471c06652025bc10ab13c3aab
-
SHA512
bd1db86c042bd62694d4d9f1df6e57838f47a560703d551c2d4078a69f5994d80d3c4cab0e7cbeaec069e085caee44c20ad60d85af4f9ac2cb80a80c182d8a78
-
SSDEEP
1536:9xp0LsQHiqKvX/PGjg8zQeahjm0/jnaemCBmjz7hMJ3iXjZmnfhj3jQYdo1Tc:z6LsQCT3u8+ahjnvBmH7m0jZmfFQ+oq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD586eae49c9463ffd4750b07e737b0db50
SHA1646cdb15016dccb1c68db858c2ba420536d6031a
SHA256b3d12be54fae252b89643ffdb03fae3d5aa63d6805cae20bea88f940317fae3a
SHA512da27dd44ce7a95ff787b8382b0965e8ae377546af595c51754d156d7553eada8630e47a552fd37d1212754d7dd6055b40ada9e1dc7fff72236bbde1aee93d4a3