Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 19:23
Static task
static1
Behavioral task
behavioral1
Sample
2c9e483729ba842161dbf111980837ebf9f50f98e153df7a9f315d486c9bdf07.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2c9e483729ba842161dbf111980837ebf9f50f98e153df7a9f315d486c9bdf07.pdf
Resource
win10v2004-20240226-en
General
-
Target
2c9e483729ba842161dbf111980837ebf9f50f98e153df7a9f315d486c9bdf07.pdf
-
Size
19KB
-
MD5
60047d74e78b897f96f454a1a4ceadfe
-
SHA1
fb9d9780e43aebf35bea0ae0724eb3b0ed16a773
-
SHA256
2c9e483729ba842161dbf111980837ebf9f50f98e153df7a9f315d486c9bdf07
-
SHA512
b1d6e807e77290a6d875e799f507b5927c17f82e9b100b456f8f101472aef83267d5b107890de1c04274a264b8276e6e433930fb385cca6538d69a8133292747
-
SSDEEP
384:8gEqvkstuhJtToj5ssRCOhPlieI1na/UdUN9EuFBzJG7HHWn:81qvkskhJpoj5ssRPlieIVFdWhVG7S
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2c9e483729ba842161dbf111980837ebf9f50f98e153df7a9f315d486c9bdf07.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f61d287e8ba5b9d744f7a506908c4f11
SHA1d393ff427cace990aa7cf53108c3a00d0c7e03bf
SHA25654a45223ea7233798888c1311874aba3ce1387812b60fe202243f423057ffdb0
SHA512d4aaeed8212ba9a8d621d1a30cbeb21d84094a7919cdce9949f90efe5a562b87682ba86f0f49e2fb1f4abf063eac5a32d4bca90d4bbf7c8ba7c75c39777f49cf