Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    153s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    05/11/2023, 03:47 UTC

General

  • Target

    NEAS.d6bb5c2d235463132fba5f58c1e3d4b0_JC.pdf

  • Size

    316KB

  • MD5

    d6bb5c2d235463132fba5f58c1e3d4b0

  • SHA1

    7b62bdcd63fd350c7bfbdac1b54c9c4f69ea386e

  • SHA256

    5880bdd4874b452afab5b630e2c5c8494e84f1befc89478040930f1f92f2df5e

  • SHA512

    1f2620271e8d027c6340ca049ead8c73225863aa2f506a7d3fccce87083915de3bc61ed19c9e37aa4b2c35410dd904f173785eb9d7f6ed4749e5e1cf93e3197b

  • SSDEEP

    6144:PORXLmerwMXvQdB6DMZiw1+Ct2BKTGliG//KAelXrKsbZ:gXLmeX4dB6DMZZ+Ct2B2Glz//KVx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.d6bb5c2d235463132fba5f58c1e3d4b0_JC.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3c14acc83fbfc639a3614ae9c988d352

    SHA1

    ceccaddfb27ed92e9e869eea791327e6164ff790

    SHA256

    11bc845db3d85ae20ce23c01e0779d8c84ac3ff1b09a8e920ed7c49fd5ab15f9

    SHA512

    e5c41129dd0194b430eb18147eb500aaaec1029229c6dbb5617c6052119ba1ec1ae5346a42771fef8ed56dfda31b1979ad7a2e7ae31d7a4389b167e61fa293ee

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.