Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

NEAS.ab725...20.pdf

windows7-x64

1

NEAS.ab725...20.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    274s
  • max time network
    315s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 18:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.ab72528f9af3b693b7bcd6947c999920.pdf

  • Size

    76KB

  • MD5

    ab72528f9af3b693b7bcd6947c999920

  • SHA1

    7e9095fd6c0c3ec4d46481ff1c86b17d1002a1db

  • SHA256

    209fe6d257f1aaff0b5002da741fdf43e1989f8fb5121d9fe83dd8b762f19e98

  • SHA512

    7cf765c78565d7b83da168fbeea76d99e775237034168c605be4d2764d83cfde4c650f38c4d3f362ad5d6b56c24e17817cea336b5d2681313a304da7549f6a81

  • SSDEEP

    1536:jlbE0LJGWxwDCr1P7COqcfVhhMCpfIBEILpPW6bVah8OeY1vX:p4MJJCCB7LfzhMqIOILlVaKOeYZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.ab72528f9af3b693b7bcd6947c999920.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a34603d74f3865736e7244f480501071

    SHA1

    9043ae9870f4d643ed24618a59404c56efbf3e0c

    SHA256

    b57e037e11a794ec6cfa3cf9718c13af75ba33d013166149d4515fa5ab0f7522

    SHA512

    d59250153cb02dfef179a58cb5412cb61579b8c5b01badd455748eefd978ff1f04e3624ed296095d95f1e42c35e566872da6b91a916ca0b0d570414108e3bfb7

    Download Submit