Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
10/03/2024, 08:34
Behavioral task
behavioral1
Sample
4cc9ca149deff87ca260bbcbe27725f97efe23c0701f84c7278cf3dc2464410e.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4cc9ca149deff87ca260bbcbe27725f97efe23c0701f84c7278cf3dc2464410e.pdf
Resource
win10v2004-20240226-en
General
-
Target
4cc9ca149deff87ca260bbcbe27725f97efe23c0701f84c7278cf3dc2464410e.pdf
-
Size
3.5MB
-
MD5
549bca2bd66062e24036cf4ca61385d1
-
SHA1
cbf2e4dface119616044ed6b30787e888d4a8592
-
SHA256
4cc9ca149deff87ca260bbcbe27725f97efe23c0701f84c7278cf3dc2464410e
-
SHA512
88c21159e85737492eea331f4ea312807035a0932bd4e5fc45ab6676a08a31180e8e712d2fca837f8717b2331d1f84c42d2ebf59de8397089a9dce41531ca151
-
SSDEEP
49152:Tw/ebmJECuFA48gO9W7Bth2j/hqWPTLJC9VisdJJ8ZNK8YmQO8+3t:dbmJiA4HFuj/VEdJmvK8Y7ON9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3028 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3028 AcroRd32.exe 3028 AcroRd32.exe 3028 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cc9ca149deff87ca260bbcbe27725f97efe23c0701f84c7278cf3dc2464410e.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3028
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dc47d00e77b3357a1950248798da7f5a
SHA1d899c675c04489f35d381dfd0115106dd32e7d72
SHA256e2ef23e867ae43598bb8fbdf816730ef5c839a75e4496a4af53d2bac15c98db5
SHA512302fe6ebdc9733a6178cba2b6e880d4c0dfd24cc793dae7095b601bb65caf444de4d745b9ecaef8dff4933ddd9378fa6c98fd95fa2b0194b47259ed3d190c1b3