Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
16/10/2023, 18:20 UTC
General
-
Target
NEAS.4fdfc9b308a92974cd3cc212ad358af0.pdf
-
Size
47KB
-
MD5
4fdfc9b308a92974cd3cc212ad358af0
-
SHA1
f94006336bf9d491c0b43f40bf1681ed2af61334
-
SHA256
b43406d8b2ea39bd639739112589c16db9d8c3c5d05bfe63f20ca931850f21d8
-
SHA512
a18b8e4123f0a9f43fbeb6ce55cc45bb88b9b4a7d10361d7c12e718616d1c5e0bb4fcc55c4fbe8e75caa275a07cecb1b3fe2136ea36832449e7e8f0f97071a1e
-
SSDEEP
768:a5As/p/sIQJUb6raDH8NjrroCva8gxDjvm8wVEyN7LZYrRi+unvUYGRyCjw35p6M:a5QJUGOY+Wr35pCH2gzYpfpcRPSQ7Ae8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.4fdfc9b308a92974cd3cc212ad358af0.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59b3a6304e34ad42aff57edb77720caf1
SHA1b13d51e7fd519ea98102654431f4d7f25e28767d
SHA25685964597394565b72773992ad7cd778e6ba38f91cef351c6099d179ad3632878
SHA512f7b91a2a41fa99bb9e3f1ceef5df1ac62f5da8b94f6f7d46b189fe684dce9f870708a5e671e1ec5d872334e7e576c0253f6ea96c4a5cf5a0ae7d44d92997e3d3