Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

NEAS.57db9...JC.pdf

windows7-x64

1

NEAS.57db9...JC.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    152s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    23/10/2023, 22:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.57db9e41027adf3af12e242c5f256350_JC.pdf

  • Size

    67KB

  • MD5

    57db9e41027adf3af12e242c5f256350

  • SHA1

    2077786bb8c75a7527060f5e84cbcde40be05028

  • SHA256

    250d76e8f9f7609e9ceea4b96a7cf7ed5fc2ed1faed32466c8217c60dc9d997d

  • SHA512

    fb7ccd8d0ba384cc48a8f036d266277236df906e00fc452c63aa27afd183394bb36b727bdb192abaacba5d94b3e4c78df4e73efaa27b547fa9192ce66c03cd3d

  • SSDEEP

    1536:qdqGVLo8u4ROtfLm9TnOXCgDF2222W6ARcnqgRy+:qdqGVkAAtyOyus6ARcnqUy+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.57db9e41027adf3af12e242c5f256350_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9ff1732c9ab32672e518495e4180b227

    SHA1

    06e59230d038571846a60a4b3fe5db7b858021ea

    SHA256

    cdb506f1c818f29c4638fdc45c0c327ff28b50a9164f06b6c8a3ec66ce9459dd

    SHA512

    d22d0d49e5f24b2861d320761e95ddc44dbd02d8183da2bce0b332d1d22fafc367475f2fb04f35e41cf835ac0497853a691faa12651e7118e89f020af65c8cd4

    Download Submit