Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22/12/2023, 05:27
Behavioral task
behavioral1
Sample
7177f07922fb0bb81e0eb9d89dfd6084.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7177f07922fb0bb81e0eb9d89dfd6084.pdf
Resource
win10v2004-20231215-en
General
-
Target
7177f07922fb0bb81e0eb9d89dfd6084.pdf
-
Size
36KB
-
MD5
7177f07922fb0bb81e0eb9d89dfd6084
-
SHA1
efdc91c85cff0ca1b3b4bc2a31a4a476ec9bc861
-
SHA256
877e30a817ff18075dfed34b3f1e9e97b75cd7a3a03106651304aa91f7cfc6ef
-
SHA512
391d4f9edc819036615a2bc538b824cc5ef0547b7c1c2cd639ebb594862ef583dbd9bad49fa70420056c66e0c1924ef56d2ef197b4d2c6d4591d080aa46bf23f
-
SSDEEP
768:+2bwINVO4LfaBQR89qNg3tctTExcKtcv+GRn07Dq45AJFWA3LuL1GooC:+2b97JLfaBQR89igdctTExcKtXM07DgE
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1692 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1692 AcroRd32.exe 1692 AcroRd32.exe 1692 AcroRd32.exe 1692 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51f260eba23801c65f2e042895a7fbf84
SHA1b29dc31ef661a0c4b5d4b0261126586ad41631be
SHA2566a4fe7a5ead1a07ebbda14ef113107bc44c03c960b8c8fc90aeebd7a723a862a
SHA512fa035930b85467fc878335cf99d15499f3145f5facfcf7fbf48b78b78c24ef63afd1d28017cdbbe5cb63582d2892d9be220aa5abeb541ae53558c18790cded60