Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/03/2024, 08:13
Static task
static1
Behavioral task
behavioral1
Sample
1f10b929b20f91c1503035ec225137a298dded695fc1f7dc0fee7b5690087a61.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1f10b929b20f91c1503035ec225137a298dded695fc1f7dc0fee7b5690087a61.pdf
Resource
win10v2004-20240226-en
General
-
Target
1f10b929b20f91c1503035ec225137a298dded695fc1f7dc0fee7b5690087a61.pdf
-
Size
37.2MB
-
MD5
3aeb35a3be49a793b2074ecfb94ec8f1
-
SHA1
2bd3b0b5d9087442f8cd909be7e903fab8c5f0a7
-
SHA256
1f10b929b20f91c1503035ec225137a298dded695fc1f7dc0fee7b5690087a61
-
SHA512
885dbb49da1d33b839f9d40b5d74dbaea0e4c7c09c9a19e4d61364ce1e8c7c455a9bead4e183b033e866a05333529b5f31beed452e129e064278de2465d45832
-
SSDEEP
786432:Mh7XqERqOMswdtF4rJSFDNuX7abvA3ODsez6Vh9qDucFJaR2w/eg1KOk:MxqFOMsw3q+pI7abxwu6Vh9qDTFJaRfa
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2388 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2388 AcroRd32.exe 2388 AcroRd32.exe 2388 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f10b929b20f91c1503035ec225137a298dded695fc1f7dc0fee7b5690087a61.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2388
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e64d87a1017073b0e09fc464091248e6
SHA1aeb27b08ad162e860fa72b642575e2be5cc0f7ab
SHA256019521f37be1dcb2a3d9e3dc32cc21c7945028dd8596ac42c6a86fc7830648c7
SHA512d14aeb22bf9b6d91a5cbe06f144a10b5bb0e7d2756cace7c133472ff8cfaa01dc0d560c6afabd1e084b4700b316bae4938464c8536841773c1780995f485b301