Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 05:05
Behavioral task
behavioral1
Sample
0f86fc2fe602f6dc794a04db5087423d.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f86fc2fe602f6dc794a04db5087423d.pdf
Resource
win10v2004-20231222-en
General
-
Target
0f86fc2fe602f6dc794a04db5087423d.pdf
-
Size
82KB
-
MD5
0f86fc2fe602f6dc794a04db5087423d
-
SHA1
252ffd1d441dc425a381e10e450582d8df8ec4ff
-
SHA256
6d4a9b0988da8029264794bcb90fb2943383b1ce608857caa594fcc994c19923
-
SHA512
48f38440751e9543318eefb0d5637303d9f7994b64363d309c27deee5f3e7224e7da8aee0aba988ab92fe4631595497fe84c5208dca72a0e2b4d4ab5e3e79334
-
SSDEEP
1536:ctXN7dESfvGLmV9YUASE5JOCxdX1VemO9j0SXwQPGpfxIzAsVGo1EICPaZlTB/RC:QNlGSQUASEDOSdXD2xcfmVQ3i95pedt
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1636 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1636 AcroRd32.exe 1636 AcroRd32.exe 1636 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5efb461fab11f689f0826505b9419535c
SHA1aec01c3c3cc09ab7c9fb13c4a9cb922448652bd8
SHA2567c3c34052afa1d360b32df13c99d18507057f4c5ed43cba82c4147712fadc664
SHA5123584fd3ab8236cf49d0015179f96194ac00bda9f6c0f69f5a4d3cdefc9e57bfc3484fa6cda38482ceec4cf1a065069ed69f0a2a0b28796841163b602f3ec52f3