Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    151s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:56

General

  • Target

    NEAS.4f425b308ce55cc08f6d40df2af590a0.pdf

  • Size

    108KB

  • MD5

    4f425b308ce55cc08f6d40df2af590a0

  • SHA1

    213ca0a05268062125230bebe2a4051411c818ff

  • SHA256

    f5fb734cfdd1e91f43e521be5a028c5ea2fba02471c06652025bc10ab13c3aab

  • SHA512

    bd1db86c042bd62694d4d9f1df6e57838f47a560703d551c2d4078a69f5994d80d3c4cab0e7cbeaec069e085caee44c20ad60d85af4f9ac2cb80a80c182d8a78

  • SSDEEP

    1536:9xp0LsQHiqKvX/PGjg8zQeahjm0/jnaemCBmjz7hMJ3iXjZmnfhj3jQYdo1Tc:z6LsQCT3u8+ahjnvBmH7m0jZmfFQ+oq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.4f425b308ce55cc08f6d40df2af590a0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    86eae49c9463ffd4750b07e737b0db50

    SHA1

    646cdb15016dccb1c68db858c2ba420536d6031a

    SHA256

    b3d12be54fae252b89643ffdb03fae3d5aa63d6805cae20bea88f940317fae3a

    SHA512

    da27dd44ce7a95ff787b8382b0965e8ae377546af595c51754d156d7553eada8630e47a552fd37d1212754d7dd6055b40ada9e1dc7fff72236bbde1aee93d4a3