Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
151s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
14/11/2023, 16:38
Behavioral task
behavioral1
Sample
ad09000365230002300000997.zip
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ad09000365230002300000997.zip
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
ad09000365230002300000997.pdf
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
ad09000365230002300000997.pdf
Resource
win10v2004-20231020-en
General
-
Target
ad09000365230002300000997.pdf
-
Size
93KB
-
MD5
798b3c56ba0e64fd5e5cbd3198c04bbc
-
SHA1
7d5d24d41af6d1de2e83f8eea3bc4ffcc42f22c8
-
SHA256
0daaaa6ea6e8ceccfd61b4f528c77c18babeb6e349555ed579ade76acf83fa92
-
SHA512
dd2f89702cf6c0a754304f72869eb13639ee4a7a1f8343839116306b3e25c82474fc49cdfe3cdb8fe4eea7c8bc5194db14b2ebd388a92a0033289acfa6ab4d66
-
SSDEEP
1536:eEnVO3gT/RoTWcz6niIumTxzES/LHWa/myYuMzrQmuM81D+nsP:hhT/2Th6ikp/jHgyO8frD+nk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3036 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3036 AcroRd32.exe 3036 AcroRd32.exe 3036 AcroRd32.exe 3036 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f0f8ae9cfa5590d9042e25631057f06b
SHA18c6909ccd6b6a6ddf92d1123bbeb17ea5d48e7d7
SHA2561d388dd1a9e72622097ec66ceefa38bdc1d19e5ad71d388269e4386eb830a6f3
SHA512358f30b6f20d34b3c3abec560664cc12ce294e38c5788f7e98486139d56ad732f89fe52cb90b644f7bf3d46e90f5862c60565c952b63e7279ac49118d8fb74e4