Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22/12/2023, 13:09
Behavioral task
behavioral1
Sample
99e0a413e98fdb46a69fcc98412cee59.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99e0a413e98fdb46a69fcc98412cee59.pdf
Resource
win10v2004-20231215-en
General
-
Target
99e0a413e98fdb46a69fcc98412cee59.pdf
-
Size
74KB
-
MD5
99e0a413e98fdb46a69fcc98412cee59
-
SHA1
cb4a4cd6db0872431a9876c84064f146d043dc69
-
SHA256
838a49a3e7a075a2db34adb45da0c51621fb342992d0e4f54511d0671e96d416
-
SHA512
0368ceed5d50245d7728ac9652a9b8aff856cd4a5c128e77ea547df461a9ced302b87adccb0d7f38550d93e2e0eb8e3e1df4aacde336eb83afc63c599c1512b6
-
SSDEEP
1536:3PyQbOBwTro5+jDm7a4suNAZ4suDYHmRDFoapyf+S1tTQRA5f:fTyMrdcafuGZB9G8zf+S1tTQR8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1240 AcroRd32.exe 1240 AcroRd32.exe 1240 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d3f4196f95b8317ad626123ffe9d754d
SHA1aad52bc16f68fa2f038d880a5eb8b89ca9151565
SHA25693de62f2f52d1f868b6663f242b105ea0462b72affb30513e220f1c66d040175
SHA5129fa45b7b744027d4324c1fda6b401bc4cc0bd49a0173c53d24e08ad2bdfd87fa8276269d1ae510f029375f443c4b8979b86f099d001241b0e11429ea5605d75a