Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    04/11/2023, 20:44

General

  • Target

    NEAS.1fc7aaf77fcfd6fc41cc69d5cdef73b0_JC.pdf

  • Size

    100KB

  • MD5

    1fc7aaf77fcfd6fc41cc69d5cdef73b0

  • SHA1

    309a35896075aecc683a8ffd2e8c34b8eb105f37

  • SHA256

    ebc7bd7616800ad100897e9aecb71297287f37e65e16c63f62afee2d3f1ab76f

  • SHA512

    8bcac7fc37cbd81eb4850628b3a89b9dcb849dd37cf7790cfea1276547716f151d4944694550b5c001fe20d8aae19986526298c8cd13502a70f228e792c7cccf

  • SSDEEP

    3072:dL19WxvrVGm0PP1VA9999999990huVzc1k30kQe+3ihCcVnlbnYCx:W5zWP1q9999999990huVzcegeT3bnvx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.1fc7aaf77fcfd6fc41cc69d5cdef73b0_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    373f015c30e9c0d0906356c3a3bf55be

    SHA1

    56eb7b85afeb6265bbf6f1201a794c9d4e1b6da5

    SHA256

    f327668dfdda33c7b4eb43b9468560b83d7c91d69a6f09dfd2942aa880865049

    SHA512

    45eff32a7bae8339a7ac99c664ea81a70d74ec5838aa5c5584408fdfcdfbbcbaa33ae342e8e7e09b8ad496785efec9c26050181bea10b6f3eaeda48a40fbe1b0