Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 23:31
Behavioral task
behavioral1
Sample
06fe818485d05d4a0f25c78a4946f64e.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
06fe818485d05d4a0f25c78a4946f64e.pdf
Resource
win10v2004-20231215-en
General
-
Target
06fe818485d05d4a0f25c78a4946f64e.pdf
-
Size
47KB
-
MD5
06fe818485d05d4a0f25c78a4946f64e
-
SHA1
35362af87fb463d9a3fea872a5a9a58e88dfcaf6
-
SHA256
f4f6a3a5f338310338bd47eb3f0182abce8449d0dc27cc9b90328566aa70e919
-
SHA512
7a1895ef59f5902c1652d808be23298dcbeffbbd98d5346abaf183874f31a0581d7ea5e4c761fd0a33f835a939fd80e525f073db32b62300a793be10efd619c1
-
SSDEEP
768:sxyeZ0lwe2nWNpknoYfesW0Q+92yvpyfB4xWqAEGyQ+ebRVk4fIHRqChw:JQ0qeQWNplmjoyckgEGZbRzIxqQw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2968 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2968 AcroRd32.exe 2968 AcroRd32.exe 2968 AcroRd32.exe 2968 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58bb458fd8bb9e3c844a835fe03504280
SHA103159a4878fdae1c06a19dc84945474e5886a79e
SHA256980764ba99fd1586484c2fdac2423aeb80c07105c39f846c76cf328a2cc8c7a9
SHA5126c714bdc1bce8541d2c9b43748d04c0e85ebb44f9296ac43a1e733d8c7919550012297ceb4c95ca8fc136bba193a9abef7d78196b6cd9893b7fcbd31cd36bbd9