Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
24/12/2023, 17:32
Behavioral task
behavioral1
Sample
08a316ede640f2b7a96b064be8702b0f.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
08a316ede640f2b7a96b064be8702b0f.pdf
Resource
win10v2004-20231222-en
General
-
Target
08a316ede640f2b7a96b064be8702b0f.pdf
-
Size
84KB
-
MD5
08a316ede640f2b7a96b064be8702b0f
-
SHA1
232c323011153529d08a8b9477595282281b69f2
-
SHA256
a14530605de2ec0aa00e9ed0002f03811849b489ed9b06ceed5dd8039612b973
-
SHA512
f1e4d67daca8b47b955c28734426ef2de9e8af3af0b829cec67b3e2dc528383d335e83d42e0959c2df8df969ebb4ff5bc86eee23f8e65ba2bb6bf689884f51e0
-
SSDEEP
1536:nWpR+8dbFMvJels1E+QHKmGW9sNjRLp0eXHlzktDgbp+yCWfBGvzx4THWkNpOPOh:WLXdbFMvgs158GoQLp0e3lgdw+MG7UoE
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2924 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2924 AcroRd32.exe 2924 AcroRd32.exe 2924 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53f67b89d9b41f5c2e28b149f7deae149
SHA1f826aeddf1ac3dbd6d31a04d392828af58f3af89
SHA256391e911e37b75480077160b6383bd1794f4ab9dd87fbf1ba3435c5e7ae1195d8
SHA512bbb71aca02e2e217f509716c1df73557e4570748579dec19f4515b9fd22f6efbeda43843868ad287440195d0f1a13efa4db4fbf56b8c1df5efd2ab19dc9008ef