Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/03/2024, 08:30
Static task
static1
Behavioral task
behavioral1
Sample
16161b6fc676740187f0d7936d0eb0c15a5d25e932f2d9fe07bf569cee28c83c.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16161b6fc676740187f0d7936d0eb0c15a5d25e932f2d9fe07bf569cee28c83c.pdf
Resource
win10v2004-20240226-en
General
-
Target
16161b6fc676740187f0d7936d0eb0c15a5d25e932f2d9fe07bf569cee28c83c.pdf
-
Size
5.6MB
-
MD5
ad40c0a607a4338d6b3447e2640b9df9
-
SHA1
e523f9367331ecffed5bedb91813c9ecc20cd4f5
-
SHA256
16161b6fc676740187f0d7936d0eb0c15a5d25e932f2d9fe07bf569cee28c83c
-
SHA512
686ec87c5e537c056103982088fbc8b347540d9109cb7fc28830de8a97bc419186a4ef6a1bc8cd40fa730cabdd314abf3e4e67cd72e31c7c8503fd487a4a3dce
-
SSDEEP
98304:xYV0/tF7Pn/qSnrC4z5KaQESsydhtSVD2Hx:xm0/tFDShKKaQtsydTWD2Hx
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2024 AcroRd32.exe 2024 AcroRd32.exe 2024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\16161b6fc676740187f0d7936d0eb0c15a5d25e932f2d9fe07bf569cee28c83c.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57863702c5cecfaa8fa98939c72c6a00f
SHA19cbf72b1ede54dc7e47cac111edcdffd5731aeec
SHA256e69577dcd9e5585153c9029f44b069a533ed352854405564bed2395f378c39f8
SHA5124b2ead49843370b37399a42204d85415d9532071280143322046cb7bf28b0ab3d2d9fa4d0030c3527bacae7a2dda50b6e0b731fe441909adb7c4990bdb749885