Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

NEAS.baf4f...30.pdf

windows7-x64

1

NEAS.baf4f...30.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2023, 08:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.baf4fa8cc8605472c56c8a581bd9b230.pdf

  • Size

    185KB

  • MD5

    baf4fa8cc8605472c56c8a581bd9b230

  • SHA1

    bec1dc9ca4658db8275b356bbed423361f871d1b

  • SHA256

    a0300950012a18dd16ecfcb9ca85218d39fa363b001a2f5bad28f67318d1638f

  • SHA512

    c34273c57da5e13f51338e35dfd7f42050249146976b1791b2c5e6a4c7aee547b0d3695d319d5e4ac3a18c0f0fb89dd3b7261b06484152dde54a3116a8f3a7f5

  • SSDEEP

    3072:JIZhr9WvdSGGk0btpJxVnSCxkGebfmx/7/MxbglHcP0aidK9RBUKJg:JIZhr9Wev9VnTxkGeb4gecPqUkh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.baf4fa8cc8605472c56c8a581bd9b230.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9f31a9af17c454689e876df6804143b6

    SHA1

    e98774684ae87bb40ab5dcc0c16fe9189781553c

    SHA256

    8e6f6c1b8b1a169623aeab57afbd4f353f1e478a9da44d1d0bf514b7583ef768

    SHA512

    12a1f45db3eb2fa68b386cf40f71636ee4defdd1897d89f8b761f3d2012bac72c93bfedd7c301ef0cf00eaef4eb931e1e4fba184268a44a2f1837a918dbc34fa

    Download Submit