Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
361s -
max time network
362s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12/03/2024, 05:24
Behavioral task
behavioral1
Sample
CURRICULUM VITAE WINNIE NJOKI MIRINGU 1.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CURRICULUM VITAE WINNIE NJOKI MIRINGU 1.pdf
Resource
win10v2004-20231215-en
General
-
Target
CURRICULUM VITAE WINNIE NJOKI MIRINGU 1.pdf
-
Size
149KB
-
MD5
0f9ed15ec77c632316d806535439273e
-
SHA1
457fc51276dae545f62d4fe3c24e6945445cc5b5
-
SHA256
d23b3846151c3b158108c982a7eb4dbab27f25af3ebfac7f83e1e6e92704d0bb
-
SHA512
8fc5d095717574e75c125e79551fee966bb912a5e53c34c5e831f21f53d773a28b9a3413cd368985b12bbd068425e4631955a3e77123391c4ba92d69209b3168
-
SSDEEP
3072:OiRYWwTjLGnKGb79RTxHY81czfzfbagR8YkrdZr6WNN:OeYW7jb79RTu3zfzfegR8bpAWNN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1692 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1692 AcroRd32.exe 1692 AcroRd32.exe 1692 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CURRICULUM VITAE WINNIE NJOKI MIRINGU 1.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1692
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58180ad2c7fa6239f2e296466619b13b3
SHA1a7268cfea51ec25c2aae4c9c580139f4d24a834f
SHA256a37baf88ae088d843b5626ccf55ad7a59c8c5c0b8af0c5f5598519dc810181d8
SHA51211bf8a15482f874a49acb9ba5196944275b2c51c33e3ee81c761581cbeef400448e9f0e0ed45626cf9375fddc28725574cbb386f9fd699dedf96b7a787f5710c