Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 21:40
Behavioral task
behavioral1
Sample
04aabf5ec23053a37e8417aa7d72be36.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04aabf5ec23053a37e8417aa7d72be36.pdf
Resource
win10v2004-20231215-en
General
-
Target
04aabf5ec23053a37e8417aa7d72be36.pdf
-
Size
94KB
-
MD5
04aabf5ec23053a37e8417aa7d72be36
-
SHA1
e24a1a6f25901451a8375bf9d858d60b02573d6a
-
SHA256
1e3cbdc04625cc63ffa5c9ffa705111ca7d363ade159ef9ed8856dda6ac18eb5
-
SHA512
80f175d0e811cbdbe7678450ba1a13654e94d537c5c2d2c70f731c556e6e5cdda1b5423fec63b6d28a1f4dcfc4a907159a94fffcd2749b870fd51991629534ec
-
SSDEEP
1536:FXek3TbxqAZJxvgECUpLibjDhkGiu/RCedTPBdeZyd3JK9PGAYZLWB3gP0WapOta:NXMAKEGzT/syTPKeFSaVtQ6v2l
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3056 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3056 AcroRd32.exe 3056 AcroRd32.exe 3056 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD503d4aa300bfd87e174d2a34178b73844
SHA14a49477f1726dd62f7d0dad8ea457b378f984895
SHA25683bf50f8282ccfebfdb16b703cb7699c6ee6777ee60ada1cf7270db815355f7b
SHA512b5758eb94bb814b2251ea0b9ee2c05a6b2db097c673ae215f5dda3c8578a91e947362069877c43e84431f669517adfeadd277f57eda7de63d7842096ebe0d5ae