Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 19:04
Behavioral task
behavioral1
Sample
012e11ee70ba0a193dd4a8f06e369f7b.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
012e11ee70ba0a193dd4a8f06e369f7b.pdf
Resource
win10v2004-20231215-en
General
-
Target
012e11ee70ba0a193dd4a8f06e369f7b.pdf
-
Size
74KB
-
MD5
012e11ee70ba0a193dd4a8f06e369f7b
-
SHA1
558e4070bc90556a8863a7070b4cae2effb84363
-
SHA256
c515c0f01860fedadac5c0aa479db63797f6bc75a443509cf850f8ecabc671c7
-
SHA512
f4e2916b10ac760acaf3bee3ce5233590742aa5127e49672d3a7bbf7fe7783aa77121acbc9a1d4b4ca1b117270c1ccb712be86428afac3cbc0167ff4143ed495
-
SSDEEP
1536:5Ak9hGg7m+kfcjJGNh3jAtcFqw+nYUDLeA25BGbQbL3auxb9WHYJEWiO5wMq0SXZ:JVRakeqw+YUfeT2Qf3a6YHYJ+Xd0C
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2168 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2168 AcroRd32.exe 2168 AcroRd32.exe 2168 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5601d60c2da223b913896b6d42caf7821
SHA1782571f9f181c3f4713cef0af578fb89362b3a46
SHA25626064201108b63ab3e5c5e134aa19ffd6e974185ffef24c28757787b4990cf83
SHA512c5ed6db8d4caa475acc892592ba618ec120e57104d508f6358fbde94dd4d63aa78ddff45c1f48e6ebb16475254da35aa66f7e2fa3cda29ba11563e9fa48323d1