Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/03/2024, 10:48
Behavioral task
behavioral1
Sample
b73b74fa803cde2f3f0cc26df916a3c8.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b73b74fa803cde2f3f0cc26df916a3c8.pdf
Resource
win10v2004-20240226-en
General
-
Target
b73b74fa803cde2f3f0cc26df916a3c8.pdf
-
Size
103KB
-
MD5
b73b74fa803cde2f3f0cc26df916a3c8
-
SHA1
ccc9a4db3ce53f79dde427533f28baceb1bd80ab
-
SHA256
78edc707f5ef6df823bafc46104b22726f2bc0ac0a2bf5d8eb593d364117c37f
-
SHA512
3b4ba3e3d454ee7902c42a5f8087813afeac548bc52874784a95ee499bce32643f98806a86ec8fdfd45ff611d5bef868402b7bb7545cfe712e2e9b11c7da591a
-
SSDEEP
3072:iGqNpCE5ArLYSr0qIYWCbU4RMs3GqJqlDg1U:EpCeArBeG5nQ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56833d1e4e47aff2e94c10f462281e943
SHA13c655de5dff4fe25cce0f3430288bcb5fc929fa4
SHA256eed5d3e40022bb0aa8201a79403a5695c744b6c1d6492da8b214c5b750ae3213
SHA512fe2f0e094923177694600cb38946cd946cd8ec0774b04446a900a79a8464ef8cb33b47fafdc9f5392f7413d613896abf685b7525c8cea18908a1ed4b0095db01