Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 11:43
Behavioral task
behavioral1
Sample
6adc03b1d68f678f91d6dde97dbcfc110b1ff842730008afb1c4c83da0e8d7ab.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6adc03b1d68f678f91d6dde97dbcfc110b1ff842730008afb1c4c83da0e8d7ab.pdf
Resource
win10v2004-20240226-en
General
-
Target
6adc03b1d68f678f91d6dde97dbcfc110b1ff842730008afb1c4c83da0e8d7ab.pdf
-
Size
2KB
-
MD5
445c13a17d5a1854a9e1e4643520ec2c
-
SHA1
ec96215555c4282da0335279ca7b51594f7f0e19
-
SHA256
6adc03b1d68f678f91d6dde97dbcfc110b1ff842730008afb1c4c83da0e8d7ab
-
SHA512
1830fcf1def01994458dd031f838192fd13d8fab70d880b016267c70724d0bef1e15204e9df3aa9cb6dba023561bab8280b9ff2a7f18aa278e1ba2cce0941168
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1664 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1664 AcroRd32.exe 1664 AcroRd32.exe 1664 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6adc03b1d68f678f91d6dde97dbcfc110b1ff842730008afb1c4c83da0e8d7ab.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1664
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55435acad2e1d601ed0933cdbdbd39c57
SHA16545822aa19a541876ca5a666ad4788114b253c4
SHA256733623bb53024ba32e846dcd5ae4a593cda879a02ebc156f8946ae709da02db2
SHA5126fadd11746deb6d7ea5c9e29e23d4e75316acdfcd37d51eff548a1c09a6d398aec9cff9cb2bdf951d76ed92b3e79b056ad20686c2a0555133fa6eef536a72fb3