Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/03/2024, 05:01

General

  • Target

    MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef/hardware/MKS Gen_L V1.0_008/MKS Gen_L V1.0_008 PIN.pdf

  • Size

    360KB

  • MD5

    18d2bd405506b24320a280b7e698a81d

  • SHA1

    f537970a25b8fc9ca1cf15ba51ace6e285c9aeeb

  • SHA256

    701898be9b1eab75ab93d063fab9d631c9e1751a62fa496032226502563678c8

  • SHA512

    3333b8b028d38e771692d9c2cab428c287254ba85cffaf9dcd9e44f1b6ea3f8c2b9f559b9d9bccc52bbd4c720b74c6058d2b20c66937c214e89afe66da280df2

  • SSDEEP

    3072:bOaAYn7VlDtBWXLS0chFZHlY1JtUFJ+twVKtWynkOBomaKiId8HREl93OGeIye7V:nzxEXRchjH4tUFJ+ZWynkr5+V1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MKS-GEN_L-8279302a37ea4e8dd0359719449b41bf2e32edef\hardware\MKS Gen_L V1.0_008\MKS Gen_L V1.0_008 PIN.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    39bd79f609703e652b95e299daac6b02

    SHA1

    5a4b9d9849b94bb87bb49a99092bfb2db2115f3d

    SHA256

    7a3f3e9a60235d00a071ff82439ccad4160b8c1467e68e4d2fec7bf3bbd64235

    SHA512

    99bee86065be03fe01778b99f03643c301856f7d5d4c4df3cc9998fa9209bc7cd3feac39dd799b3ea8349cc1a3f5111ba90832ddb7eb644a69846d22be3a30a5