Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 19:55 UTC
Static task
static1
Behavioral task
behavioral1
Sample
206338908706a8518047cc5d7475560713e65238060d7492ae684a2c63d74014.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
206338908706a8518047cc5d7475560713e65238060d7492ae684a2c63d74014.pdf
Resource
win10v2004-20240412-en
General
-
Target
206338908706a8518047cc5d7475560713e65238060d7492ae684a2c63d74014.pdf
-
Size
208KB
-
MD5
e200727127e77d28501bfbf6fce0090b
-
SHA1
bbddb0790e1ed9fdf45e113914ae6b8c1ed7b10b
-
SHA256
206338908706a8518047cc5d7475560713e65238060d7492ae684a2c63d74014
-
SHA512
3b36587c7a460a2428128f1ddcb8d7e738b1bf281edc81bcc0d320ef55d45dc7b9558c95301ecf792c032e12891c99da2820ea1269caf6e2843fe7b06961ded0
-
SSDEEP
6144:x5GA+LsahJyouxh+HXKhedBJxJ2kf7TyUh:x8IazybedvxD7TyO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1708 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1708 AcroRd32.exe 1708 AcroRd32.exe 1708 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\206338908706a8518047cc5d7475560713e65238060d7492ae684a2c63d74014.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1708
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50ed5f4570c6248281e7a1acf430b8884
SHA13e8675008d3e41af24c1e881cdfe27ac479649bd
SHA256d341da40d393a228bf55b5f099ea4ed381a33d80200444bd81f2955170ae1d09
SHA5124fb48fe5bdb12a867478d1366b1b28e50aabdd45eff015cd4de8a7d2c58d39af8f592789b4977ef1ee6a65bf87cf0ef744484adf5751767e9590c762798c7c7a