Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
13/02/2024, 17:03
Behavioral task
behavioral1
Sample
99ac5aab86387b6eadeeaab843c17505.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
99ac5aab86387b6eadeeaab843c17505.pdf
Resource
win10v2004-20231222-en
General
-
Target
99ac5aab86387b6eadeeaab843c17505.pdf
-
Size
86KB
-
MD5
99ac5aab86387b6eadeeaab843c17505
-
SHA1
455caa03cd62040db5f6f520c3b6bc33b2d30113
-
SHA256
1028f46533c763460273df96a665715171950ffc117c6c275bb742177768ff52
-
SHA512
e175d5f402c0c29abd9938a94793956eb6a99e6a4ac75a9c7b3852ce21bb6a2e3c1fdc8413a636b50550e9cabc5457d37cb9748c579f7ddc112a4c76309598e7
-
SSDEEP
1536:bAJtQ49edbwDZ9mGRaV1MSoMjZTow0INM6pw/05WkNpOPaWzVfwbWRZ6K15XCt/h:Uy4Z9TRaV1MFMlF0INDwdP1RZ6GC59
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1888 AcroRd32.exe 1888 AcroRd32.exe 1888 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5684399d137592c6aa0f27f1e7eb9790f
SHA12a9e616d66bbc9708a54492c8d6838d3e3cfe197
SHA25660769b4a42af85136889f8ea134a9066f3cb91f46fee186ecd4a290f006d47e1
SHA51255b2d973d114d719d568f4e8124bf7eea603f7ef49099a427efe709258cb70c8eb14a9b4c40b25c9b97a166efcc8ea2adb79c29d79c128cd197ec278c58d2f75