Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 22:59
Behavioral task
behavioral1
Sample
1f39ef7522bae9d7796d0320deb86336.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f39ef7522bae9d7796d0320deb86336.pdf
Resource
win10v2004-20231215-en
General
-
Target
1f39ef7522bae9d7796d0320deb86336.pdf
-
Size
101KB
-
MD5
1f39ef7522bae9d7796d0320deb86336
-
SHA1
3c26aa90bd743417fd5baa7e0482ed220daea4c4
-
SHA256
27eb620c7365a3d6c8d2fabc94ff84cb90a277ed1e68f7ef6ed8bdb9bd6988db
-
SHA512
342ca0a8ad52c4366063d2e83860c169f4d4f480fc2f8872b03a4b09624f22e55401e3ce6750575d16b2ad86d33d883e71a4e3dee46281754ad28db04dfbd33c
-
SSDEEP
1536:oVQ/LLa5XHpcb7bUQGIQMk7fGdRx0ebljrEz2TRpTBFf4obsEWJMXoSFDoN1w5XX:MQ+q3bUQLj0eblEy3nfdBo1NW5qK9Rt
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1820 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1820 AcroRd32.exe 1820 AcroRd32.exe 1820 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59b24b64da3b3f1f800df427ca8f082b9
SHA11904f2ba9593a99e86b8bdc47251e3c0baf33fd7
SHA256fb19f7ffe49b658ba53ff74dad94b52eda9bb834a9e73b49bf29b5b680bb282e
SHA5125ce7ee5489dc3b0cb28027b640de10872d06a024193808150af836dc14f04f43f976ef92f6823614e4f2052421607630d2ce226f9267f95ceff4636a2b4bc2f3