Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
05/01/2024, 07:46
Behavioral task
behavioral1
Sample
43243f101418a2b00e2029a61b6d31d0.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
43243f101418a2b00e2029a61b6d31d0.pdf
Resource
win10v2004-20231215-en
General
-
Target
43243f101418a2b00e2029a61b6d31d0.pdf
-
Size
73KB
-
MD5
43243f101418a2b00e2029a61b6d31d0
-
SHA1
bd641786c567554af5bd0f212c3f86c9766248c7
-
SHA256
f308208709bb6480de2f56987866dacfc57e34782202b4e119e1ee594caf53d0
-
SHA512
1efb855659fd634b3a5991730dde5ee7f451b36fca6266069c7258c0ed80ee6e8a0b5f65bcaeb4a7757ea122a29d5785f89ae3da8ef55474b1c83d35be6f7f0d
-
SSDEEP
1536:zMJjnPMXoYQ+FEQajn7P8dVN78o8rxxD/hZgcUXF7m5OFPY07dzeQ2pxb2vTua:5TQKZarzYVBqxxjDgc6kIPYCdiQ2/Of
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2896 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2896 AcroRd32.exe 2896 AcroRd32.exe 2896 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5958b643666d5e440f6f340bcd6a67597
SHA18bb4bcebeac2113e848871c94ea11e08f5198def
SHA25610a711b116bc5c75256e966dd39ea91538bac37a434a13ea17b7eba572dbdaa8
SHA512043ba4ec5e65acd83717a0f44c6c336c591177c4df6ae47f149a3cbca03d38222306aaa35eab36f730dc1f9a2802d42386b54947711115b796b9dd5b35b99703