Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/03/2024, 06:06
Behavioral task
behavioral1
Sample
4e98db5b8a8be085487f70038b7bb9ac6a921b2b0e1de825984474c12dab0a4a.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4e98db5b8a8be085487f70038b7bb9ac6a921b2b0e1de825984474c12dab0a4a.pdf
Resource
win10v2004-20240226-en
General
-
Target
4e98db5b8a8be085487f70038b7bb9ac6a921b2b0e1de825984474c12dab0a4a.pdf
-
Size
95KB
-
MD5
4985f434e3fb8dd5b72e52358a9e94da
-
SHA1
1ced24036db9b91daf763b22ac1b46bb74162591
-
SHA256
4e98db5b8a8be085487f70038b7bb9ac6a921b2b0e1de825984474c12dab0a4a
-
SHA512
b85528ef949588fa64202e4d675db35771cd68b3209014374717b708bf571469720bdb9287d701f353e9928614ab4bc95effa06ed65199c7da24d0bb299e6e0b
-
SSDEEP
1536:HsuhB9E504g42ytVNzgrVuaV9Mu5ff4t0xhKuyutno5CsJ6gxLZEyb6rf31/CMs0:HtXEGmJVhgYClf9xkuyQo5CstxLZhE3J
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2084 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2084 AcroRd32.exe 2084 AcroRd32.exe 2084 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4e98db5b8a8be085487f70038b7bb9ac6a921b2b0e1de825984474c12dab0a4a.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2084
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57f2bdac753ada54331caef5833e5c28b
SHA1f0055d787584b9a2860073f669995820ce748a6c
SHA2562e508d4c9a1d31ce3c6733c4921d3b265174a078f44d83242278a200d291e19f
SHA512420ffbd6b7dcf887356e11ddf4eb9559c0edb24c948d267f5d3886c891b76fff83e3926a71f63a2968a90d095f9f6c877242e2e35192cddd79f300ae435555aa