Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/12/2023, 12:34
Behavioral task
behavioral1
Sample
6ee1b94ba5cdb9dbc340288776abbd54.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6ee1b94ba5cdb9dbc340288776abbd54.pdf
Resource
win10v2004-20231215-en
General
-
Target
6ee1b94ba5cdb9dbc340288776abbd54.pdf
-
Size
35KB
-
MD5
6ee1b94ba5cdb9dbc340288776abbd54
-
SHA1
ee3b19d7b729efa474235af5ea1a666b5058915b
-
SHA256
4d1c81ab7c9b5c23562bae4d1c2bd2ed29a104432edc40c043d61c8625952043
-
SHA512
b72ca7582e5158ffecc11dad1f951c2e1d8af4af6f1aa5d8e1dc2ad4a10041f0f2bec9c5b09160f413e25aad80f9dfc8bb921e27d4cb2a60ea25397c3a83d703
-
SSDEEP
768:5gGzpDbPUZ5uxnwv1idcjMDhT0TUlLSziC0VRM9mECXCxDk:6GFnNWMCTUlLIiCOGzUCxDk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3028 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3028 AcroRd32.exe 3028 AcroRd32.exe 3028 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e9a6e6b6651409742417f724dfc49fde
SHA1b2ba1cffaafb647a4439a9fe852497d107baef60
SHA256cedcf3fd279ba55d32638bfd3dd10067414c424a87b6cb5ef11876615a490eb6
SHA512052a114768cc8414f335dc2decb2665e84c651d42ca52182982f511f7c53e3062004689303eb3b2641a4b2c6337d7b5d648b28a3f3a7e5393df7a8dfc43b8dc8