Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13/03/2024, 23:47
Static task
static1
Behavioral task
behavioral1
Sample
ad968bb09a8b33ad3d8d3c7f6f7101a509dbe956461e8c5c2d35ce87089699f8.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad968bb09a8b33ad3d8d3c7f6f7101a509dbe956461e8c5c2d35ce87089699f8.pdf
Resource
win10v2004-20240226-en
General
-
Target
ad968bb09a8b33ad3d8d3c7f6f7101a509dbe956461e8c5c2d35ce87089699f8.pdf
-
Size
94KB
-
MD5
12957437afdd352cbb10fd88da004079
-
SHA1
871db48d3b1fe5e53419aba8314346782ce84ca0
-
SHA256
ad968bb09a8b33ad3d8d3c7f6f7101a509dbe956461e8c5c2d35ce87089699f8
-
SHA512
ca415e0ba37b2d5b6e92910e2cfb23c44463729a5103b7f6621b089f6abff78c778ab38b30b2686eb0e000675c0da8f6a0ed3ef9c7f87f76114323b9cc6949d7
-
SSDEEP
1536:6uZir9KBxE2hX9L/EU25c8T/V0SFnATKWy1q+W35D/wM/T8uUyj9cvGQ0hsqvb3v:6Air9KBxdX9L/E5cI/XNATKW8w35D/wM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2936 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2936 AcroRd32.exe 2936 AcroRd32.exe 2936 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ad968bb09a8b33ad3d8d3c7f6f7101a509dbe956461e8c5c2d35ce87089699f8.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2936
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a8830f141212b9845ede341ce3c6f2fe
SHA1f3c34184904d4a9663bea547f779d5c4eabc1c8b
SHA256e44f31638f5943f440d8edc20027a537bf78a1f53dd2ba35ed515d386d7f4474
SHA5120bca209ea7180e0f1588a256ba92cfc5d5ecdeff69e0d587cd43c1d86cded3c7f72f8545fb45bae97869d19b42fd6d7c5fe6ed5ed17953a10eb4b54ae73b07ab