Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    154s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2023, 08:56

General

  • Target

    NEAS.a17e7a4fab1d71b7e44bd90243ff1ec0.pdf

  • Size

    71KB

  • MD5

    a17e7a4fab1d71b7e44bd90243ff1ec0

  • SHA1

    6b6b9eda7c5a67e5afa1789598db066a134471df

  • SHA256

    e4fd9ebf4239c11b77ef361e4f3f2974012fa5fc3f640a4747f7ee7988d76ef4

  • SHA512

    c1fd891a763c7107bb6884053e6565b07eb42dcf4dd0df10d6b119e2d1a4bc9698a36463be4511139eabbb9bd22fc8370a7db4b67a4f18c35c3e577f5b56ed2e

  • SSDEEP

    1536:WLMMMMMMMMMygy9W6ZtrVKE3Ah+7hDzRoy4vU7imEeoUPWafxiBiw6Wpqcan:oMMMMMMMMMygmW6ZtrVvC8hDGyIHmEed

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.a17e7a4fab1d71b7e44bd90243ff1ec0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    df632e680060c33f2dd82a3f2eddfdfb

    SHA1

    a55daa1c2127e0ea50cb61693439865bd49bbf4d

    SHA256

    e1904fd26b63095cceb4d632247f54c69dc2069fcd990f862c74ce361935eb30

    SHA512

    a317fabe9575484f72800c9d6339817a773b5344f257a99fb080562d5f0638786d0a778826fe77a280955e6b4a1c6f8248e571a23ba9c6ed8b0737e3fe43a7bc