Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 01:23
Behavioral task
behavioral1
Sample
202e3bfaac592faed80d14e24d3be240.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
202e3bfaac592faed80d14e24d3be240.pdf
Resource
win10v2004-20231222-en
General
-
Target
202e3bfaac592faed80d14e24d3be240.pdf
-
Size
90KB
-
MD5
202e3bfaac592faed80d14e24d3be240
-
SHA1
ca83d9be1dbde7ed3d923742bf47563b4bb8880f
-
SHA256
27874b83a8280f7584e2b2c97be64f2127f4a3d9aea8001c219343e642d20213
-
SHA512
b918b60737c1561bb17d46a3a3cd2071360773cc3186f4a7d2b5be2014e2922ea8395dfb7682b4778164a39f58c98ebb4c37e77b217e4977db6f37adc403218b
-
SSDEEP
1536:HZsr27VUT15YW95horcGcMSI+GdIJHjBXU/2nhSYaJuUz4yyW7LxIOfWspORRqm:UYUT/YWXGrRpD1dIJFX5nMYaJfz4yIO+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3024 AcroRd32.exe 3024 AcroRd32.exe 3024 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5318208682db5c60adebf2b1a1992181b
SHA1474ffcd194bd3e8c2cd211fbd2fb4d784c17de95
SHA256b788f3724f4911f8e88163c954104da274b6ca0bf0961f3ebdf233e95dd8acd9
SHA51246041db0ae5778ba849b578105da168e31795cbaea5b6e4ad2ad9ddaa56f502913fdec86539cdecefb21904454e2e43425a0b4fff84aabd2123526230f5a386e