Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
19/02/2024, 09:38
Behavioral task
behavioral1
Sample
d78478ab88e9c82c9b487317a586e12262078a0e24df544b70449484d8f4d4f3.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d78478ab88e9c82c9b487317a586e12262078a0e24df544b70449484d8f4d4f3.pdf
Resource
win10v2004-20231215-en
General
-
Target
d78478ab88e9c82c9b487317a586e12262078a0e24df544b70449484d8f4d4f3.pdf
-
Size
351KB
-
MD5
b97f91ee0b6d0cbb222c4ff537790dff
-
SHA1
76a1eb559f81b8015d914ab6d45e51a131e38092
-
SHA256
d78478ab88e9c82c9b487317a586e12262078a0e24df544b70449484d8f4d4f3
-
SHA512
09d7085135fee95c8ac1d6dbe11d7a851b5d53acb8fea2ba93de4ff7da30a73ea7c12139668646ffc910147dbbe481b516458bda9f000b1d3f20a103b1547595
-
SSDEEP
6144:GfTvMVg+trIey2yYuvHCPLpcMdUASu7g/uo2UtqLBJobRwaKXH8:GbWtBy2yYUizpcyUAS+8uvMW8RwaKXc
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3060 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3060 AcroRd32.exe 3060 AcroRd32.exe 3060 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d78478ab88e9c82c9b487317a586e12262078a0e24df544b70449484d8f4d4f3.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3060
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fd610bb2d5fa73f0dd0e76c4fb9aa3ad
SHA1381ab95187f6426dad4f969accd77f47cd17fdfb
SHA256362683c0ef2bed6f0a191ca4e5add1fd3be0c1e0540fa2e43497bf0498ee7ac6
SHA512d171700a50ca3a153dd4a56399eee12e52044b4b31134b9fe62b24c2226ab402b8883979bc4e4eebc0820de25510838c6d32a3dd839dddeabc26fa92dbbb909d