Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
13/03/2024, 08:09
Behavioral task
behavioral1
Sample
c563d1a4e93d1c5f740ec0f0562fd6f2.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c563d1a4e93d1c5f740ec0f0562fd6f2.pdf
Resource
win10v2004-20240226-en
General
-
Target
c563d1a4e93d1c5f740ec0f0562fd6f2.pdf
-
Size
86KB
-
MD5
c563d1a4e93d1c5f740ec0f0562fd6f2
-
SHA1
4ca92d3b0371fe88b2a2af6dce2bdb4452453ac0
-
SHA256
b93904a0ab55af14ee6d309677dc2685dc6f00619d61c66b94e6b2e3fd89a272
-
SHA512
8fcfd458cdb82d1528a9f5b5ccc0c9f5c52d24db1edbd5893096d01597d7d08eca1d3fcdc8777a66f6702ca0cccb120d5c35e9510bf58e7e13bcf52c4c56fe3a
-
SSDEEP
1536:sX9tNEF4vqg7uHZDTtmp/AbHGb0bxbIWwD7cXoVIdDpHW15v4WG+qF0xoZhLW8pI:m94F4vqg7BpYz8+Hw3/Kpp215vNqFhhw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2784 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2784 AcroRd32.exe 2784 AcroRd32.exe 2784 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58ef6c941796f7f1c9e24464a2511b99c
SHA1de414f8cf9e359f4c1930487b2037dd01702446c
SHA2563d8b78f9706484834239806783113d7680a2e3dcbc5765b15f91e3c4647f974a
SHA512e1b5bc320327603a3d0da45da9e895e66c1cdafd661f7f161dc9dd0cb7147a8aa577ed7229a7fa01e062ddcca992ee6ef946660101322a41e6513f552fb35855