Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 07:58
Behavioral task
behavioral1
Sample
107eab7fe2ef3c4c9f5d6612a98a353c.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
107eab7fe2ef3c4c9f5d6612a98a353c.pdf
Resource
win10v2004-20231222-en
General
-
Target
107eab7fe2ef3c4c9f5d6612a98a353c.pdf
-
Size
88KB
-
MD5
107eab7fe2ef3c4c9f5d6612a98a353c
-
SHA1
c08a5ba9e4df91335f3cab1dd282ae3558e813e5
-
SHA256
178024848da35eb84b154965848cbdcded162412e803f3568c753016ca034919
-
SHA512
fc44259297a6974d73762474595136b4ca6d2ae29cd5e3a7c9e3fd1056d4ff351525b290acfaa924be4b48f71b7a6a005996d3c05851feb938cebf86502a0b24
-
SSDEEP
1536:Qi91zdAtlHZp2G73hf5bFM5etWNNvEumZk/CRH5oW+6v8aPylWOpOwr0yrsIqZ:d9HAvn73hfQ5e8yA25v8aKiwr0ua
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 848 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 848 AcroRd32.exe 848 AcroRd32.exe 848 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD531ab01530a071b41d14c230d0a45a10c
SHA1a7902672e53b6fb4455f0ac6a0138aee14b79312
SHA256effecb2acfbb18342e4e4ec92476078e4e515938562ec236422bec533e36ab80
SHA5123c6c93be515c2312836d705bc0173dc15a153ccdad9800c0719704a91efc4a6bb89c8c33792f56aadf75ebb4b9d4c2f485d339699a8a3377255c519302adda9c