Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/03/2024, 00:41
Behavioral task
behavioral1
Sample
e05bd6e330ea44aabb0c4adc378fb044.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e05bd6e330ea44aabb0c4adc378fb044.pdf
Resource
win10v2004-20240226-en
General
-
Target
e05bd6e330ea44aabb0c4adc378fb044.pdf
-
Size
81KB
-
MD5
e05bd6e330ea44aabb0c4adc378fb044
-
SHA1
04065a046300ec88d3c17cd960f824ca7626b26e
-
SHA256
1bb6fc05ddaef766de41b040b36a0c8bb213db1d4ad8d0d3bf1f625af4d42905
-
SHA512
d914152d257cc1b3b8ef35bbc8cb4429f72c23bac907ba1c672bb14be6b8d98d72fb6d8c43997cf0b7ea851f24506c469367f0f3d48ac69ad508fa7f223348c2
-
SSDEEP
1536:Ts7bwmHfJCRJyWaSEr2VTKUR32Xo4lVXXs9/WBQ6CyK1zW8pO76JeSla:g7bwmMRIqEil32Xo4baAeyK1e76wSs
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1284 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1284 AcroRd32.exe 1284 AcroRd32.exe 1284 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55a0b2662dd1324de11c189433ffd6066
SHA17ca836c4110e6373440b2250556d327069bb3232
SHA25673dfd18eb6d9a3b1ea9ffc85779ebbc9d7d1e90ad18314c05e0ee4a3c84f1792
SHA5124e6b6c04b531201c24b86995f3f98ae90f8bf34013318da2bf22439b624812fa40b58eedf4650dd2b42e94cdc30106d5a0dbaa39159cba669d4d76d8a3f8bf3f