Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:58

General

  • Target

    NEAS.b7ae20f9dae823182638b801cbee9560.pdf

  • Size

    306KB

  • MD5

    b7ae20f9dae823182638b801cbee9560

  • SHA1

    94a5a9b26185cd644261c4c0fcd47a8d9f9d9926

  • SHA256

    5463b535717017cf12674fcdc28152c0eac518f7bc950babfbc1d7c7eec5318a

  • SHA512

    849b1f5c113aafc84f65d0e38b5c7f4d2503abb0e0f73729c5f32cd56d994de991c3b5327613b543d608b101ea333caeddec98903cbe6a49bacf14a713d857fc

  • SSDEEP

    6144:gtelKQKbkh/ddxgDp5OuzQpA4SKQSbERU16hoyvBdpCbPsLZjK3CMQ:jdKbmdLMnShSKQGER5a6B2EdW3CP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.b7ae20f9dae823182638b801cbee9560.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5b5694027674b35e6208dd074987812e

    SHA1

    953ef7e8b6a9829ab632a4e84c52c43a773fa360

    SHA256

    ed538e39edfcc52698a4c6fa1a0946280b461758c7d0b7cbb1585904184b8654

    SHA512

    789b83d9e0c6df8fa6996181b32fe3f3d2b5d16e7a9f872f789c5e583fda5eff80dc7468fae9a07c59152b3baec3052996aa54263897b95f13b3a664d2f0a2fe