Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 01:19
Behavioral task
behavioral1
Sample
22c1a224d53d63801bc804184e83f26c.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22c1a224d53d63801bc804184e83f26c.pdf
Resource
win10v2004-20231215-en
General
-
Target
22c1a224d53d63801bc804184e83f26c.pdf
-
Size
87KB
-
MD5
22c1a224d53d63801bc804184e83f26c
-
SHA1
96c51587f975633d9e65ba3a9eb035cb894e364e
-
SHA256
84b7e17f7146e42a22bb61cef62d8991d68f4fd6804392671e4d9b0cc5fa1c85
-
SHA512
cef23d90f5f5c40d21a775a2f57c6d18b3fe0862d05183afad10085db7823c7c6a12625f94cecfefc93b2f5cabb036891340ce742959af195f7db599a768ea16
-
SSDEEP
1536:Az3U+tFzm9BI40NDqIWjy0XOKhDCLW2pF4BYT0IsuUM+4We4hbgqWOpOwru1WZu:WtFzmb0BqIWm0X/ROpFO80IhykfwrwN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3048 AcroRd32.exe 3048 AcroRd32.exe 3048 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5abbd8c7475deb90060e9c93b815cf422
SHA1e8db2a75188cfa2185a9e439f297d44c72114de3
SHA25642d967c4eab22af1d9e326fc7998b44c83dc5993cd3d72238e2584a76f1f58ff
SHA512f26db098e2750b56f510e0f5eae4c6f67ecb3232e5e7209b331af64ab405e404f7ca7eab9e75ca9baf93f1ef142b104a5d22d042d732dd02f04b28d99640eaae