Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
18/02/2024, 21:11
Static task
static1
Behavioral task
behavioral1
Sample
795d7256c73f3e097dc6fad6afee7c6add5400e09323fb18b17a6b44da15d216.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
795d7256c73f3e097dc6fad6afee7c6add5400e09323fb18b17a6b44da15d216.pdf
Resource
win10v2004-20231222-en
General
-
Target
795d7256c73f3e097dc6fad6afee7c6add5400e09323fb18b17a6b44da15d216.pdf
-
Size
103KB
-
MD5
c46fde521f144fde36418bc0189f44fb
-
SHA1
d6c6e4afb4fafc90124bc0c001d8db10b4ec46ca
-
SHA256
795d7256c73f3e097dc6fad6afee7c6add5400e09323fb18b17a6b44da15d216
-
SHA512
fc2a0d2711d00a9d5aa9188c5910a284f6b375ef6357c7ab381cd62cf33f6ff9969dc40444f39c561187b4a8102c9db2676acd0e6f118e334049029b7014cbf9
-
SSDEEP
1536:FlnyivSxhVQsrH4mmT1IkzROhnY0sgVPQ79zDAmI4rdSL0lB8:FVDvSxhtrH4mmT1I80nYkqFAmIiSL0l+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1204 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1204 AcroRd32.exe 1204 AcroRd32.exe 1204 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\795d7256c73f3e097dc6fad6afee7c6add5400e09323fb18b17a6b44da15d216.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1204
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50bed150c970488b8a9189fbd12e6e9f0
SHA159d8057429c6e59f296fca976f8c44f1bb5cf6b0
SHA2569561df12d9b41e343a3a867ed7cba16378c755c91df9ca42812823418713b20d
SHA5124457fa8fd5c18a8457225d6947b4cf6b203ceb1b0670ed7c8491ac4e8d1e417a40c20bd6ded90064f8a4266cbe9955819d3f4bccb586c8b2cb8951216940f103