Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
15/10/2023, 10:58
Behavioral task
behavioral1
Sample
NEAS.f5fedc1b120346e9b642bf3d55fff590.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.f5fedc1b120346e9b642bf3d55fff590.pdf
Resource
win10v2004-20230915-en
General
-
Target
NEAS.f5fedc1b120346e9b642bf3d55fff590.pdf
-
Size
75KB
-
MD5
f5fedc1b120346e9b642bf3d55fff590
-
SHA1
92a9e52cbf60c39612f24d38873edf188e23a7ba
-
SHA256
9f9e4bdb79f478e355158f4821f68bc7ca1703528dcc3f5427662b3e37340ceb
-
SHA512
aebd0c93abbca7e30256351b5095414f46352152483e45e18b4abc03b2ecbd94ec4af5e8521391ade7ff77b321d9c04f5701b3283d97227eaa08005ae7bc66e8
-
SSDEEP
1536:0rShVe0/CG/Gy+HPYqLtY2SFYLpgYX1yhCVen4ooZvdum3p:0rShjuBZY2SFYLpfXpVI4lTp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1888 AcroRd32.exe 1888 AcroRd32.exe 1888 AcroRd32.exe 1888 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59b8debef233f7ef27fe79ae069c4abc1
SHA1c4d7c342de3279a455c4e8c8b082846744b1bbc3
SHA25603181da4e7aaf2847c10bc5de5ffefbe5ebbc4197428b63997095f300fed0c46
SHA51214824ce8d9b4d8d84a3a1d6a67181b154dc5c91a6af5d05646c041517ccf5908ffdd0048d11098a4ce47a57796f71de5d3be23eb176256ebd7377ce44eb93cef