Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/03/2024, 06:38
Behavioral task
behavioral1
Sample
d573651cb227f557a0e0ec0637e826a7.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d573651cb227f557a0e0ec0637e826a7.pdf
Resource
win10v2004-20240226-en
General
-
Target
d573651cb227f557a0e0ec0637e826a7.pdf
-
Size
92KB
-
MD5
d573651cb227f557a0e0ec0637e826a7
-
SHA1
ded6095f671debaba9c3646b7810904570b980ed
-
SHA256
5d41d75346c14c10b6f0e3b7b3264545cfcaa1a1f962dae90bbb324f2b3cbafb
-
SHA512
a1fe8d428265e5f805bcdb3f1965e5ebc30203cefe0acf08ca8aed7cc73fa85693cd3cc97fe09efc3ba323e33944dff9f9e901ecf2adeaa6d60010c72b91eb99
-
SSDEEP
1536:rPTdb6CBxoIydwGo74DO1u7ngbAeelu764gJUhLchF+LknWGERH1RhmLHhjWnGso:7Th6YxXy9W4i0gb7eluMUhLchF1GbcLl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54ed49dd4c07b3a3fb135ee955aced248
SHA189890bf7458c7a5754ee5c7f285ab04b30957b72
SHA256a62c2f13f7a10167083cc3925857f72a1237cc99f35a973b06e1c6cafdaeac3e
SHA512bb0d91fa762600c483c4c604b35a0d059905be7e091f7e0b56f9bdd798a09fadbb283ef6fbcdc3211678d5e039a4e4edbcc0732f1d867f5c53d07c0b1baea9f7