Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

NEAS.fe472...40.pdf

windows7-x64

1

NEAS.fe472...40.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2023, 10:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.fe4728413c0674a582d4b010d2499640.pdf

  • Size

    1.1MB

  • MD5

    fe4728413c0674a582d4b010d2499640

  • SHA1

    994b66e3a6ecf7f2523bc814562ce06fbe84f390

  • SHA256

    d97e59c93ad5f34cf0e6e193f539a8b2bbb8746740ef8f8a21faacd52c79efbc

  • SHA512

    9d2151de56b49557ad7c40ee9a4033d831bfa10e19f8f88e68713e80a645805682e4a5618a536d8f3d9db66723e56938edf4f3086f2e5107bc0d0eec6d3d05b2

  • SSDEEP

    24576:k9rRlb5RQ5ZCaDdsnMzo6wLeYBnhofyEgDUiDwBd6uzg4Ww:k9t1OLDWvvLe2nMPgDUiDwBdH/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.fe4728413c0674a582d4b010d2499640.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    288560c68ac252a6688e4fdc664792ac

    SHA1

    26cc61d2b1e09bf9c9d9cb1d4ebb36c4fa4575a5

    SHA256

    952692fdf869881303649c2dce0337bc021d1fcfb47e688d803d2f97232c20e7

    SHA512

    0a29a3cd1fc6cbf5976df00a6ce33eea3a940fd20a6473ad60753a29ac688bdf43058b323307ec54056d817f77e253a27ef72b90a4d4cc81134b1a2476ea2457

    Download Submit