Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 06:35
Static task
static1
Behavioral task
behavioral1
Sample
fc5e6e593a971b4ad6e3025aa044f2097770375e3367946c4104f5d36e565054.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fc5e6e593a971b4ad6e3025aa044f2097770375e3367946c4104f5d36e565054.pdf
Resource
win10v2004-20240412-en
General
-
Target
fc5e6e593a971b4ad6e3025aa044f2097770375e3367946c4104f5d36e565054.pdf
-
Size
810KB
-
MD5
e7e6d2ca16fa2ea33395ff8fb0e0c898
-
SHA1
27fc77c5c76ef34840ec98d5a28c31438b60b580
-
SHA256
fc5e6e593a971b4ad6e3025aa044f2097770375e3367946c4104f5d36e565054
-
SHA512
916af9004d09ee2df67f9d4bb5c6860e9cbc98507044210bf0674e8c17d8025913d28cc3b4cc98c592a486c8d75f816743997dd59d657b83dfd69d64837f5963
-
SSDEEP
12288:fVF5Zyc7of8fFUi1jIB7vB4Q9uQZuJgY42NAIQgoaRhBmG7DUmDWtgfAAM:5ZD7o0Oi1GJ9uQZuJZtNB1DUmDTzM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2872 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2872 AcroRd32.exe 2872 AcroRd32.exe 2872 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc5e6e593a971b4ad6e3025aa044f2097770375e3367946c4104f5d36e565054.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2872
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58603002781746af4e61f0c1af0c07710
SHA16b6690faa8a92563f4bddd60e47fe73db99342ff
SHA256dcaa8871712952c1ed900184980e6204f0c3ca5fb669f5d3afe29cf8537c4404
SHA512511b9ce0d478eeb7db4d3b0bcca98cc234032205352f0987cb895cbe9e5b9605720e861bb13eb7e3823047a07353080c6d22d6cf2921f687db56ff50648b595b