Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
18/02/2024, 21:06
Static task
static1
Behavioral task
behavioral1
Sample
6ce412cfcb86c9518fa97d2a7200aaa119ecd710466bce5254c5dd468a2c2d68.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6ce412cfcb86c9518fa97d2a7200aaa119ecd710466bce5254c5dd468a2c2d68.pdf
Resource
win10v2004-20231215-en
General
-
Target
6ce412cfcb86c9518fa97d2a7200aaa119ecd710466bce5254c5dd468a2c2d68.pdf
-
Size
65KB
-
MD5
505472c5a421952a59bba197595251a1
-
SHA1
ca1e7c622543d4ac728b23fe15a79295b9167fc9
-
SHA256
6ce412cfcb86c9518fa97d2a7200aaa119ecd710466bce5254c5dd468a2c2d68
-
SHA512
5b17bf2912521717c103f5b8a138a8f0e6a538c93abd49d348b456ef0b0d7b2441bc64e583ff4e0a4d381218dc192128952775565c6f0935afbe613bd6ec81d9
-
SSDEEP
1536:/jNBrPNJ5GTqyB3t+G76b4I6nl+uARkEJFXiQW27vFrCQ:Z9PNJYR9f7w/El+xJLWQh
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1604 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1604 AcroRd32.exe 1604 AcroRd32.exe 1604 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6ce412cfcb86c9518fa97d2a7200aaa119ecd710466bce5254c5dd468a2c2d68.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1604
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a86289b271f656b5581bd00d55a98f82
SHA134333593eb75960c02f96340caaa18dac6b19a4c
SHA256bc9c6217a47c3ff44a715ec1d63110392b1737ba80c41e791372174606e41379
SHA512a1f9d392bc8f2f6f3f876665303c811cc90e0c7af7b9aff743cf179e368c04eb51fcecdc0e21731da3e665d81e36882b23c352250358a45eac877c40805fa70b