Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

NEAS.bddaf...00.pdf

windows7-x64

1

NEAS.bddaf...00.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    152s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 18:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.bddaf40d2682663a3e8a5d76ef8a0a00.pdf

  • Size

    386KB

  • MD5

    bddaf40d2682663a3e8a5d76ef8a0a00

  • SHA1

    32afd97963be1f733f19af6d7bd0a16ccd212fbe

  • SHA256

    3904a54a740cc7e91219999ffa4f9fc7468281302131819fabb17489753be6aa

  • SHA512

    adc30b7f2a166ecfd416550681dce022ed089490c9b8756c2e4a89e828d7c2a3ddd4fefbd7656b5586b2e8f3d48719157791900d6e9187c00707bb98a04de546

  • SSDEEP

    6144:JBtrvlkiBpZuTS3FSWvzQhSook4WBytgnK2S3gLWPem30fNhFkcc3Vdt/LZEvQku:JrxLUKFW4jb9wLWX3aGccFdxd8QbT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.bddaf40d2682663a3e8a5d76ef8a0a00.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    13ecc1655e6f62d372f62b5ce944d505

    SHA1

    6475afa915af376a7992c4a99d84492aad3da080

    SHA256

    aa28f2812433cb57c9a8f6096a0c29fa903cef8bd58c57ee7ba4700f4a7be78d

    SHA512

    169f61db61c833edad7438e892b18b3e9f0faf1e65c2c04c47c4515c0e6664900a4ffb291ddf859a55e6fb9533802eae796129086fdb696e4fd286e9844e5e7a

    Download Submit