Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
19/02/2024, 21:15
240219-z34f9sdh49 419/02/2024, 21:14
240219-z3j3madc8z 419/02/2024, 21:09
240219-zzn76sdc4x 419/02/2024, 21:06
240219-zxwt8sdg46 419/02/2024, 21:02
240219-zvllgsdb61 419/02/2024, 20:38
240219-ze2mrscg61 4Analysis
-
max time kernel
1564s -
max time network
1568s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
19/02/2024, 21:15
Behavioral task
behavioral1
Sample
water.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
water.pdf
Resource
win10v2004-20231215-en
General
-
Target
water.pdf
-
Size
2.2MB
-
MD5
9433dd42515a296d1da339ae4b5e9429
-
SHA1
b9547f3788105563949dc95d016350c12f429525
-
SHA256
012119721ed9de6b4f7cb2384423e63bb5e8093319ecccff5091b51edbb55e1f
-
SHA512
c33d949bb35cf7c3b1ff825e796fd1b08ea3132d305cdb102d3591177c45d0c26c9f5da4d4d9d5d446d962fc56bf109670f2ea8f01e9340d166f4edf2eb91062
-
SSDEEP
49152:XgPsLITpmtUh0Jvv+kds3MIZs1sS9Qoxak:XZITplavNfAS9Qoxak
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2248 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2248 AcroRd32.exe 2248 AcroRd32.exe 2248 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD510acddd421af08b7a5003976d2ad5a29
SHA1f22b931b0b097380df52796987e9e4c703f09a5d
SHA2563e3a5fe41d3c1d76e991be7778676b496dc6afd245c6c4c28c7f77680c16b44a
SHA5120f39992996123ffe50607035ea095105ba81f88c96e60c7a9487238f40e4f8f07e54243f59ec405fd948f7b8ca37f874babd14564d9424421c03c588a25c22d0