Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

NEAS.b3e93...JC.pdf

windows7-x64

1

NEAS.b3e93...JC.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    02/11/2023, 05:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.b3e93ffe5bc14be2d52fcfac5b744260_JC.pdf

  • Size

    79KB

  • MD5

    b3e93ffe5bc14be2d52fcfac5b744260

  • SHA1

    3a39fbec892dd382d007580bc0d07220a6c6def3

  • SHA256

    8f24d2c0b12e0726039cda53046aed3986835cd47777a2a16d3f498e8277f684

  • SHA512

    09e3c7536258e49ec50485749daed8e003615eb5861f00effcae488e709bab1cb910b398bbeeafe66f67c6f6d6ddb8a84818315d35ecdb5a675cd41c56bc87d9

  • SSDEEP

    1536:nwntDlkbj+O00vsa1XZp7UfuM1Bh6hs7Y6m6XrCdkWxApOGzW63S2NgqErD:wtY90a1v76uM1z6hs86FUl3GtnNhW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.b3e93ffe5bc14be2d52fcfac5b744260_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    79789ec804d21e1d1147c5dd74b43750

    SHA1

    3a2b90b547ac41900f1dc54ce543e416c1f4daa2

    SHA256

    da6c7756f19683d075e78349ddc227542f9f46f1052acc2ebcc5cd33e15aea9b

    SHA512

    a10d0c642ae4742a267d4de245e6fe8fbf5d0e78080efa2811d5388393e0efa7837352e8e524b784b884289ea98d96319c33815214f28a6f96df5caae7c2e127

    Download Submit