Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

NEAS.70c34...f0.pdf

windows7-x64

1

NEAS.70c34...f0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    151s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.70c349df46f3c493e16dbf3084eae5f0.pdf

  • Size

    81KB

  • MD5

    70c349df46f3c493e16dbf3084eae5f0

  • SHA1

    7ff37c41d71b1db9228371e46b9a0aa9f81c44a7

  • SHA256

    3bd14c2f1d58551a578c1844a7698d9330c269b2e368156d19ee05b1216171ce

  • SHA512

    814225d34c34739cd0be8b9592fede565acf21eef6a5e1dfcad04d087204759ecdba4b9155a4cc9650912a06ce743f23dc002a23f1048a2f976798e70b4b6274

  • SSDEEP

    1536:zUB0o3J4tFvP98b/HpZMqBjNxzEtxzgSouFcAg0u6KMASkGxseWnuSdDzRCUZ6ks:+i7FoBGqdAKSDmgMzR96ylu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.70c349df46f3c493e16dbf3084eae5f0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0659c3582bb9089cf71edbbfea61a9b4

    SHA1

    68b1c0f70f9df17f82dd299ca8d83f8c309e37b2

    SHA256

    c869b7fc07c61f4d1121f39cc77ec78b17fffa49723c3146a479e914f57e34c9

    SHA512

    cb6a9927a0b52152dfd690163e215a53dfd413bbcfca3d6720bca7e75fe16d4357f95d796b24a4b67ab1cb828a9e7f6543ce694c85b8ab3fcc0cd0a52a4e3e59

    Download Submit