Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
08/04/2024, 19:54
240408-ymmm5sac45 108/04/2024, 19:46
240408-yhfc9saa97 105/04/2024, 15:27
240405-svwm5agb24 1Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 15:27
Static task
static1
Behavioral task
behavioral1
Sample
ParkingTicket_6332270.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ParkingTicket_6332270.pdf
Resource
win10v2004-20240226-en
General
-
Target
ParkingTicket_6332270.pdf
-
Size
6KB
-
MD5
a2269935aa8e28d7e8442d3b2629fd70
-
SHA1
9b9330aa5ebc19e984e0eb843585831a2352b5a6
-
SHA256
210efdaf5a78c234308645e04cd5dddd0120633498931d71effa02ef5f1b19fb
-
SHA512
c58d49482276ff640cf1569d7bc6b888810da8a4b43b617cd5080dba1248641cc15a5fb3f4827b5055de68020b8fd5c84ef8fcccadee7d313aef9b1a759e63b2
-
SSDEEP
192:ypML0/LzmjD3rhNoOLKLhR89THSF1s+kmg4PRHw6:ypML0/LzmjD3rhNoZLhR89THSF1mmg4h
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2208 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2208 AcroRd32.exe 2208 AcroRd32.exe 2208 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ec247f2cd27f93631392ad1beaa8d30e
SHA10250d7906cc016855099e464e8c3d4cee8a15908
SHA256206df0b9e040a18f36a39ec5eb8f4dd6d9914c589c56420aba75f0d15d781a15
SHA5123fe8978a962852043e56fe2260257c4d84f3a2281f44fc6a5e982a86d49b4a312663fc950d1658e692dd0efb3307ddfdfc5d066a6d1e1acbfe381a653b822874