Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22/01/2024, 14:47
Behavioral task
behavioral1
Sample
6fb30ba8af7a0f8b25a521e0f61387f6.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fb30ba8af7a0f8b25a521e0f61387f6.pdf
Resource
win10v2004-20231215-en
General
-
Target
6fb30ba8af7a0f8b25a521e0f61387f6.pdf
-
Size
42KB
-
MD5
6fb30ba8af7a0f8b25a521e0f61387f6
-
SHA1
8f2a6c432b0b176e8cb170c11b0b00dc9d92ed2f
-
SHA256
30c75f86244d355c700b57d6f9181f81f267ff7e018b6d3112df6b1b120741f8
-
SHA512
252841ce4a564ded866fd5f27a2a446cd2aacf11fc34189e0e2a729156ef026ee355d98554fa118d9974d68694497b1bb77ad931510526ff74c8988e0c2a6776
-
SSDEEP
768:UOE8GTB8/wW7n8YEmqpVJk1BRn5NTXM6IHND5Ts4s1pKW/5:Or8IW7XepXkNfXBIN1ipt5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 808 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 808 AcroRd32.exe 808 AcroRd32.exe 808 AcroRd32.exe 808 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5057fefeacc9346ec370e8ea9b59e4ee4
SHA11deb1662fdca833cc2a6805385b02d326be559b1
SHA2564e4c0cc1f8ee45991eca31e64470262e92cdb2c54b5861a30389e4f16c27e6ff
SHA512db2f09e1c3f07688e4c693024831086ddf06d7350c358bc3262a09d9bf56b8417a5e84e98167a44ae715a43826cca96405d1f6c8d98939a3238c5094e9486f07