Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
15/10/2023, 10:58
Behavioral task
behavioral1
Sample
NEAS.b7ae20f9dae823182638b801cbee9560.pdf
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b7ae20f9dae823182638b801cbee9560.pdf
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b7ae20f9dae823182638b801cbee9560.pdf
-
Size
306KB
-
MD5
b7ae20f9dae823182638b801cbee9560
-
SHA1
94a5a9b26185cd644261c4c0fcd47a8d9f9d9926
-
SHA256
5463b535717017cf12674fcdc28152c0eac518f7bc950babfbc1d7c7eec5318a
-
SHA512
849b1f5c113aafc84f65d0e38b5c7f4d2503abb0e0f73729c5f32cd56d994de991c3b5327613b543d608b101ea333caeddec98903cbe6a49bacf14a713d857fc
-
SSDEEP
6144:gtelKQKbkh/ddxgDp5OuzQpA4SKQSbERU16hoyvBdpCbPsLZjK3CMQ:jdKbmdLMnShSKQGER5a6B2EdW3CP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2972 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2972 AcroRd32.exe 2972 AcroRd32.exe 2972 AcroRd32.exe 2972 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55b5694027674b35e6208dd074987812e
SHA1953ef7e8b6a9829ab632a4e84c52c43a773fa360
SHA256ed538e39edfcc52698a4c6fa1a0946280b461758c7d0b7cbb1585904184b8654
SHA512789b83d9e0c6df8fa6996181b32fe3f3d2b5d16e7a9f872f789c5e583fda5eff80dc7468fae9a07c59152b3baec3052996aa54263897b95f13b3a664d2f0a2fe