Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
10/01/2024, 04:45
Behavioral task
behavioral1
Sample
4f9e1d53e6665d9f934957e3eea5093e.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4f9e1d53e6665d9f934957e3eea5093e.pdf
Resource
win10v2004-20231215-en
General
-
Target
4f9e1d53e6665d9f934957e3eea5093e.pdf
-
Size
92KB
-
MD5
4f9e1d53e6665d9f934957e3eea5093e
-
SHA1
95f63c57cf92fd9091b5101cf8581db6bfe4df57
-
SHA256
34b87d4ea0dfc3f6cf4e500cb5af0e81c76c25aeb0ed326f2e525a3ddfc86acd
-
SHA512
28319da345d8dbebc2066b086978b73e9316e1307135d50dbf531679a29561e774059e97e5d8897a174e55e9142fa60b304fac938569bd4022a86f3e31ad6d02
-
SSDEEP
1536:l41XXf+JcvVorvbfJpRZRFdrb/05YcxmNHDJZwJIDzDU41ousSLWfDEowi0eWxN0:61nWJ8V6bfJrLFtncxmfZHDn1o7uLNa1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2896 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2896 AcroRd32.exe 2896 AcroRd32.exe 2896 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56d1a76c3dc75d082bb709c497cf45c70
SHA1bbb7dad8569a04cb51fd5d09d162840d2465c5b0
SHA256fe9b779b6a41a6b77bace708bff234b2ad2ad94b4e47299999067aca093797a5
SHA5121e10560ca1829a2c314a2c337883510fb8af3a4cfde38014ae2d934ec31fa7fb7c80e79d4bff0be5369c4bad7e9a235542c3dba97c0f0c657fbd558e6ffba794