Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
19/12/2023, 14:59
Behavioral task
behavioral1
Sample
48e0a1615887817ba678668dc6ca0f05.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48e0a1615887817ba678668dc6ca0f05.pdf
Resource
win10v2004-20231201-en
General
-
Target
48e0a1615887817ba678668dc6ca0f05.pdf
-
Size
84KB
-
MD5
48e0a1615887817ba678668dc6ca0f05
-
SHA1
7243abf165847e3c16e9c53bfac1e443cba9509e
-
SHA256
bb214f6721bd6da62d5c14969b0c6a3a580e8a0144d06c2765c7a62746b16d0c
-
SHA512
5f775e92f46938531352501133a78bf1dbc0518065d7912ee7b47419dfb2bf100f677a3db5d65e32b3b56f86b84a9a50266881c270f66c1f497f58eedc1f5471
-
SSDEEP
1536:mXbv7yxJ6E+OT2HVZE+Qcpco5DEzt23rGh7Q1EXoNFJ0W4BrsPBg+j6cLaWCpOVu:ibv7yx0aTsfZQMDEx2w7hXS2Br1eLXVu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2400 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2400 AcroRd32.exe 2400 AcroRd32.exe 2400 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56da54769f4c86478c370809a7d9b5ce4
SHA1a0506fd5359fe31d2e0c3b4a4631cc1145ae7974
SHA256becf2390ac527ff5c8aec3251b758372d5af59bbe7170ddbf6dbfdbbf73f1e74
SHA512f0edc9d9210a7bc71b7faffdcb6fc53169a348e4398f152848bb47c77bd0347e059b92c22344f70e0626b79a7805fdec489c9a5179226107f84688018c9f52cc