Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

NEAS.94813...10.pdf

windows7-x64

1

NEAS.94813...10.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    152s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    03/11/2023, 10:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.948139ade478f3ddbddf77c6eb6e4e10.pdf

  • Size

    373KB

  • MD5

    948139ade478f3ddbddf77c6eb6e4e10

  • SHA1

    f212790bad28a6b00e6ec81ba8719f71b636b289

  • SHA256

    0817363e969ee8b51878a273f5c9267375a1428893b928eb8e77d05796e4b711

  • SHA512

    0e0b2dfa1883a62f272af5bbbe8376962aae13a6266da7a43097c4beda7d44f9d8f4f1c6e458dfe2d0812498b1ab00d2615a0263777a7e0f5776a6ed932c4b83

  • SSDEEP

    6144:7IZhd11A3Huei+cNaGvysEJ36WgHjKawyfckSgx9S2VMA5sSE8DiRmP/BCHwAGKb:E5aH93fzSfcslVMH78GQ/A+osPi/N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.948139ade478f3ddbddf77c6eb6e4e10.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c6ac84e71fb04e0d0de4b342fe5a6f2d

    SHA1

    caf81f51a0a717d26d27772446bb290d2753befa

    SHA256

    85a0326b60b3b8e413c0536f63a92b1e2cae5ee40f35b97c31055a9e3eeb22d8

    SHA512

    2af09be19a297d21e7373f1ba399aa44fd4e5453165a1e100d812f223e9fceb1c8f9fb13911b19f25594a6b6ed94a1173f7b258fa58c38f7fa7d2399ccccbd5a

    Download Submit