Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 20:56
Behavioral task
behavioral1
Sample
643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da.pdf
Resource
win10v2004-20240226-en
General
-
Target
643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da.pdf
-
Size
944KB
-
MD5
121e70d295cb05ff711e1a787266317e
-
SHA1
97fbf6249872eb6d32b03a40fa12beca65081688
-
SHA256
643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da
-
SHA512
ecf934c6e4f0c54eee1ec54de93dc8cff88d964340fe0dd3def0f39b1d86123e5ee4e3574fbccb03e05a2fe964f28456bcefba2e9f3a858213c8f92a6c23d806
-
SSDEEP
24576:Eh/zPuN2g0FC7hqw1ageOt3+2ACNUcFebvit:irPuAqwjyQCuweGt
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1728 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1728 AcroRd32.exe 1728 AcroRd32.exe 1728 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\643ab92c98ae9244b028893da8c30d68ad8f095226e9697290c5e590b58320da.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1728
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54f1af1b6efe6ad8a9c81176e8d361b55
SHA1da1910c70a34ce4538eb2a708b5ac8c348f86180
SHA2566973b6b2639d0f87fee32c1f833470fdd11064b22c3e4b65e173646fd8ca2a29
SHA512b3017ad1ce05fbb38a41c43295ed279b12d5ce44787a92c42e8a94b2907a36bcbc0317a803ad1197b9cd3d8f413812dd1403f4992c6e6343474599650c564971