Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 01:31
Behavioral task
behavioral1
Sample
92cdee40a9448b45c019fd5b9ec7ab35fbcff832cde7bfeee11fade8d9023bba.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
92cdee40a9448b45c019fd5b9ec7ab35fbcff832cde7bfeee11fade8d9023bba.pdf
Resource
win10v2004-20240412-en
General
-
Target
92cdee40a9448b45c019fd5b9ec7ab35fbcff832cde7bfeee11fade8d9023bba.pdf
-
Size
61KB
-
MD5
dda81564780f906db50b0d4d7f36eda7
-
SHA1
614b4da5092a6758ef9d421108fc463afad7f99b
-
SHA256
92cdee40a9448b45c019fd5b9ec7ab35fbcff832cde7bfeee11fade8d9023bba
-
SHA512
f60924b15724336748b9c3db45d9b593619f8c1d27c5db13febe70bf2a8f3fb334648557ef7c8158f9f9271eac5b70239a43770abc7fccc5b27680f7ba709a07
-
SSDEEP
1536:dZsQ0zKAKHFiKlpYeuNf0nd5WGZ5lX5PWTiuJyaTyl:90zKAODlHul0ndJbVsTyag
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2124 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2124 AcroRd32.exe 2124 AcroRd32.exe 2124 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\92cdee40a9448b45c019fd5b9ec7ab35fbcff832cde7bfeee11fade8d9023bba.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2124
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c6b914cf557d07746522865be1a5bcca
SHA1e907c7fd861405a48880b73fe8a97ffff0661b68
SHA256d60f8245846728c83c23671f04a48037e4fddd87a56b0c3e2e47af8f0e9c5fe8
SHA512e5be34f3ad5ea9a3001e9910cc6def6b6e9725fa51ee6124600165bc72db531c74836697172659318c06c2506b940bbbb513315c61fd32584982b10940be18cb