Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
13/03/2024, 18:48
Behavioral task
behavioral1
Sample
c69d5fab5325a8979a1903ca1ce5cddc.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c69d5fab5325a8979a1903ca1ce5cddc.pdf
Resource
win10v2004-20240226-en
General
-
Target
c69d5fab5325a8979a1903ca1ce5cddc.pdf
-
Size
87KB
-
MD5
c69d5fab5325a8979a1903ca1ce5cddc
-
SHA1
dc10a8910aafecefa36ba336ffe8d67c1692349e
-
SHA256
f9b0495f0fa31db955e1d0a73421fd138b4d7739c28677d8af9000707a0c7ef9
-
SHA512
7fad54c7522f5973c837a98deb62d6d11d7b185b3ec010b3fc6b24a3184dc5430e658d739d27d8e09e8281eafcdd2b6ab2a5ef5fc9991a7d02521cf4090ed4c5
-
SSDEEP
1536:wy98Was2vpjsqmaqmMJYWYpqAcO8zv3SXu9yOshjZhrW/ZMFFwcgsgpJErZWbpOU:v96TvpoTH6p38zv3SewBjWMgwgpurbNm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2824 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2824 AcroRd32.exe 2824 AcroRd32.exe 2824 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD585b09154764f4af651835cc7cafba44e
SHA1b8166336f7d77904619f39ced61e16b1605c2e7e
SHA2561a54dd4d679a6887462503159334d2367c9af6c046ee4ea10d5513455e7aa668
SHA512ef8966a9fb96ca5d60fbe24af0470cac436eb6801835ed488e691d3a2a1948f7901a4ce52ee8fa6b788d56432b221205ce4620014ea699e6606d8b4f6dd0be7c