Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 19:07
Behavioral task
behavioral1
Sample
3ad1fe845bb0e8e8a6d037d811f98a77.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3ad1fe845bb0e8e8a6d037d811f98a77.pdf
Resource
win10v2004-20231215-en
General
-
Target
3ad1fe845bb0e8e8a6d037d811f98a77.pdf
-
Size
86KB
-
MD5
3ad1fe845bb0e8e8a6d037d811f98a77
-
SHA1
77e9422f919c08a369e3d7342771e3b5816a156f
-
SHA256
602caf4a2827c16063d26123cdfecb2c41cfa51e272c474ad307a77cf206ada3
-
SHA512
2a0679ca2d8503cd95e63c006c665d48d293eb63bd0a7154ecb589da64860a70df1823d5ee291c2f3ab93a1bea9eea7f517e24c6044cb4de5cbbba35d27850b9
-
SSDEEP
1536:YsFE+cMlUIyzbjvVXh+5MQLYIatLZvUEZqpd8WA7ME8rLHWOpOaZkxKH5A:dE+cMhy/bOCQcF3HZp4EeYaZkxKG
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2168 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2168 AcroRd32.exe 2168 AcroRd32.exe 2168 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f1c1c5c8ff2d1e173349c4ca2686e66f
SHA12a888a0cdb9634bfaac6a066e3a81e92160537d8
SHA2567a07252b42c6ddfe4fe07aab8e3e6c2aa9cd183ed8c5f8a2cf6e2bf4085b4444
SHA512f8b04faf2a716b61eb22eb24992de2c28f192b7f64953c4e76a98a3428a6abd5e38d4c8488c2746f427e9e6c3ea80dc3c9193218ed83a41e69fdae38545dc21c