Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
13/02/2024, 23:24
Behavioral task
behavioral1
Sample
9a2fbf7e7b37a5b71bbbcaaf7f135689.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a2fbf7e7b37a5b71bbbcaaf7f135689.pdf
Resource
win10v2004-20231222-en
General
-
Target
9a2fbf7e7b37a5b71bbbcaaf7f135689.pdf
-
Size
81KB
-
MD5
9a2fbf7e7b37a5b71bbbcaaf7f135689
-
SHA1
a7c3a29400cd30ae5332632574ad8ba305e73284
-
SHA256
be6601cdeeb691d91b45f727fe35d76dd53ea27d8691a5b916bbfc83be468ca2
-
SHA512
e2215301fa21399b6f8b0e97f0e6b9b7804dfc5173bb1d929f1ff55480f8e4de86a2e6c25913667a953fb5bb98d5f4c76799cf29453497e11091bb3f0eba055e
-
SSDEEP
1536:TScDLXG5BlrKNmB33oMbmXvTUsuSaVNZXgxhWGpOKCWkDYU6H19hayofAOVrN8:+cPIBlv3YM6/TUsuS3xWKp7V9hayog
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3000 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3000 AcroRd32.exe 3000 AcroRd32.exe 3000 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dcb3ab38be4b50e7914e330135e982fe
SHA1f3cfe714ef928a8d5531dd371dcacca3e84593e7
SHA256a5394848592965834920f4b73aa107bc2db95e6c85fc2dc39cd3a9db70396469
SHA5126bf9368728253e2ac8adca8cf2fe8fd30142739b5042ca7c5a2cdf4b7389866532100778a9135543e62446ccfe655687496004e170414c4c1771ef218dbb9feb