Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07/03/2024, 09:08
Behavioral task
behavioral1
Sample
b85bdc014e1bf6a86dd8013591efc84b.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b85bdc014e1bf6a86dd8013591efc84b.pdf
Resource
win10v2004-20240226-en
General
-
Target
b85bdc014e1bf6a86dd8013591efc84b.pdf
-
Size
92KB
-
MD5
b85bdc014e1bf6a86dd8013591efc84b
-
SHA1
8063b22a70a97b5aa0f95d7c93a7d01691cfb8fe
-
SHA256
77eda4501a30aaa99a23fc558f1122e3e553546b20a403bf742bbb2f12dea1eb
-
SHA512
9c866e03d71c34df3688d800d9e5b309f1e1738bbef1af272286ee5a005475f89f15b277287477517413bc1aeb3b8dad4e7896192ee6f9d3313c9a4379a20bc3
-
SSDEEP
1536:eQTjxm3p70dTyKQ7kfENAADWEUshGWDUmR4FfUfYodWLmn1M5/BWApO64Ycn/9E:zjxm3p70dT1gQENAALRDUgRQoV1M5/IG
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2980 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2980 AcroRd32.exe 2980 AcroRd32.exe 2980 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e5b3138cd8f6eaa422e55793e4b49a15
SHA18b9aaf63b09d38d72e8605de5e6134f4d626b449
SHA2568288829405fde88df709444f149ea8666386e6c903749e825d1ff48dab7cd260
SHA5122259c73ec635fe8e03545d99f1f57d189f4e46e2fdd8ed3dccf34b8434743c8c7f5cc763db2ce84ed01e87bae002dca11f03456b7cdf0aab494f0fca944bf326