Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

NEAS.e0db9...c0.pdf

windows7-x64

1

NEAS.e0db9...c0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    153s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    17/11/2023, 18:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.e0db9a0f871dcb4414451b22bf2ba6c0.pdf

  • Size

    1.9MB

  • MD5

    e0db9a0f871dcb4414451b22bf2ba6c0

  • SHA1

    1fb60b6b7948908575787359d366a5a09130383d

  • SHA256

    529248bd99c744755c1a36b0afd0fdbd78fce7ca39f41c2c3ba458e3ee69542d

  • SHA512

    585badbb9f7d2969c935ee86a240f1e9ebdb66fec0a21f86463b5f9723502a125b5506b913180b6f000a0aa99dc215313c1496eaf151be47e9881744af86b8b3

  • SSDEEP

    49152:LSdgiMJYi2/4fWMuQIvxsPGHkI8x0v5Hfe9q2ONBJGRzQa+8Q:WdgDYiuFQtI8ywUBIzQa+8Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NEAS.e0db9a0f871dcb4414451b22bf2ba6c0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    bc496f7a6ffebd7e189379a9ada2a9b1

    SHA1

    4b06f00ea0bbb4bfbcd03f9f7a2d45a9cc7f453a

    SHA256

    3265a684ddfd9f5f325414ab59067ec733f2d7d36d20eb608d32edf6cf404701

    SHA512

    f72a46ab540065bc4ff94928ef6063710f2100a15906d13d794381486817d505308969672aba16b3b6946dc43c95e1a4836914656830e76f457c2fe1d613129d

    Download Submit