Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 22:31
Static task
static1
Behavioral task
behavioral1
Sample
5bef701b87843a3143a677ff287bde0e55f06c055c62613bfe4332fa3bde5dd6.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5bef701b87843a3143a677ff287bde0e55f06c055c62613bfe4332fa3bde5dd6.pdf
Resource
win10v2004-20240412-en
General
-
Target
5bef701b87843a3143a677ff287bde0e55f06c055c62613bfe4332fa3bde5dd6.pdf
-
Size
5.2MB
-
MD5
3d72ece94bc559c32b3204e3836efe4b
-
SHA1
139fc1f04bd3aa1329104d499412918b82b0a196
-
SHA256
5bef701b87843a3143a677ff287bde0e55f06c055c62613bfe4332fa3bde5dd6
-
SHA512
882705054dd15064f603ab6d61bf59fe318ae894e1da6d9c38a73b9e29b0b57e84a1c3a2302f6e274781c1920d3ca3a91491683c63772856830313a9020f84cb
-
SSDEEP
98304:ZqY16SJvL9TyaR6VVWXKaprZLt2lfhh12UrhQSb420r02x:ZxNJvhTRyA6apgh12UrhQA0rB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2784 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2784 AcroRd32.exe 2784 AcroRd32.exe 2784 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bef701b87843a3143a677ff287bde0e55f06c055c62613bfe4332fa3bde5dd6.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2784
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5411414132d6844906ac52147585ca97d
SHA1dc7071360b151c054d4f172662d47f9cd71110d0
SHA256eeeb481013624eee975f680871b57611b46e8a8a41eaa87093135ab9a4623e16
SHA5129651dd81830441e56ee75ffdc2225403e2502be9f597ad4720e1af451199d2cc12cfbaa201c8867aad444e0d2762c410f6e19a1352d4eb61249d35db190db5a3