Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
18/02/2024, 21:14
Static task
static1
Behavioral task
behavioral1
Sample
d4fd9a0dbeef1bd461ed9ad48b20d3d995f921d8b74d401c7dc5b88763665e3b.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d4fd9a0dbeef1bd461ed9ad48b20d3d995f921d8b74d401c7dc5b88763665e3b.pdf
Resource
win10v2004-20231215-en
General
-
Target
d4fd9a0dbeef1bd461ed9ad48b20d3d995f921d8b74d401c7dc5b88763665e3b.pdf
-
Size
86KB
-
MD5
773dddc3fa95ca14aac7da9373d7f447
-
SHA1
d14980bcada5712ac1849e24f97fce54de51963d
-
SHA256
d4fd9a0dbeef1bd461ed9ad48b20d3d995f921d8b74d401c7dc5b88763665e3b
-
SHA512
b02b3df76eca0544996b4465558fc1a17dda8eb13ee050962211d9bebf98b16a1cf08c7a5d8891f60df94633bff76ae66ffb42d1b263e701493bc585d281c568
-
SSDEEP
1536:ZZLvK2WnKkJ0ZcG6eDaqstjdX29R8A/qCWI0ixsbWR8pCL6jvw:ZZDK2Wn1+Zc0Dq5Y8AZ0ixsbWypCL6o
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d4fd9a0dbeef1bd461ed9ad48b20d3d995f921d8b74d401c7dc5b88763665e3b.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5548e9b8183e6f679ea445cef12d8ca74
SHA163a102503ab794236272a56e06a5ed7276d320ab
SHA256b9bdeac42c6be9f022a71d3f5a58c0f7798edec9505c5bb7e1322ba998497e6a
SHA512a58604f6e610d46becac45de5bee769a38f560bf65d2702fb115ff01fb2a1d3db57f33dbc1dcfab1275aead8a43d25f8a870e752d08dd57310e14faa846144aa