Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
13/03/2024, 23:25
Behavioral task
behavioral1
Sample
f7d3650b124a6bfd8c90f1379a2acf622a8b8abd60da51c90cfb20aeed227c25.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f7d3650b124a6bfd8c90f1379a2acf622a8b8abd60da51c90cfb20aeed227c25.pdf
Resource
win10v2004-20240226-en
General
-
Target
f7d3650b124a6bfd8c90f1379a2acf622a8b8abd60da51c90cfb20aeed227c25.pdf
-
Size
204KB
-
MD5
cb196db6ad861fca754c60da10b04d8c
-
SHA1
1dbc7c26b9a5efc48fba946bbe026a13065a2dff
-
SHA256
f7d3650b124a6bfd8c90f1379a2acf622a8b8abd60da51c90cfb20aeed227c25
-
SHA512
1a664605bf57e0c02ce3432e95bd86691d779ea075c3fc9195f00ab7c377162ad5ab04f563bfdc4f1793a769efeb055438a555206e9039b7bc9d23bc9b312c08
-
SSDEEP
3072:QTUCTfJUXqFtBFQHH0SbJvguDy4WLwMj6mFP/xXyG0IBdPlyUJ:IptU6xFQnN9vg4IMmZ/xXyG7N5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2968 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2968 AcroRd32.exe 2968 AcroRd32.exe 2968 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f7d3650b124a6bfd8c90f1379a2acf622a8b8abd60da51c90cfb20aeed227c25.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2968
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51e13f72f671730fcc05433b391ba0b96
SHA1e09b71dce04484605f9b18eb664220b3d986edde
SHA2562358fe58bf14598a75fcab76aaca1b60cf89a7c375303edfc5868c130514b954
SHA5122da7a5c6cae04de7862fa54f1dad0732bfcd3024bd04550bac9b0db9d26b2ad2e1057d643b5805483c9254a2c95307980d61a6d213e246c5d4102ade72ccb7c5