Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
19/12/2023, 12:40
Behavioral task
behavioral1
Sample
25e6406d5e3c01f4d689c3d072cf2f1c.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25e6406d5e3c01f4d689c3d072cf2f1c.pdf
Resource
win10v2004-20231201-en
General
-
Target
25e6406d5e3c01f4d689c3d072cf2f1c.pdf
-
Size
87KB
-
MD5
25e6406d5e3c01f4d689c3d072cf2f1c
-
SHA1
cbcb4c3ed2e05020941b114c93df24cba3bf75ad
-
SHA256
7f98f4cd17b611307008d0e1c73f4eebfee08fd8824b8e121c2ff66264a89fbb
-
SHA512
452c6f6758959eba12de4df6e7815451d2c736072c24fe0075a8bf2ec2da7e41172e24d4c4d45b58131309c49be518df9a2ba9719e83ffdf73363e7232fc9c9b
-
SSDEEP
1536:Ea0OgqbhQP0acF0zh8gd6trXNiCwot4ECRm5tl08+a9OPWOpOaZIFAWd8fb/W0Y8:d9gq1QcacF0zh82kXNiCwot4ECRm5tlG
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3068 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3068 AcroRd32.exe 3068 AcroRd32.exe 3068 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a343e8b4176f987f7b866275dc46c1de
SHA102a1a1c0c90af19bf292b1f4a48b9082034f1bfe
SHA256e8047d25a68d063c8aa0b2b0804b36f23c33be46aad04ebfd022bdde4c9ca9a0
SHA512443c46176ee9c1600e4e64891bb9d13f6818d455bd0c64f84ee1f7a4912c19d83d2b08a7f794c23f388518dc788f3ee50fcea64fe59c91bf55b9ac48982ec1ad