Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 11:04

General

  • Target

    50475cada15eb668be856127f1f3e0f0_NEAS.pdf

  • Size

    383KB

  • MD5

    50475cada15eb668be856127f1f3e0f0

  • SHA1

    5c831d851bc7e6ada40f9ba10688a5879438474f

  • SHA256

    df66a1d2fc311eb8cb00d854e7788cffd64554afd92383b108768ab054ca3c90

  • SHA512

    38690f5cef466458274a6e8433aea65ab0a3a5e459ab965a88be6c697e56292fcc7a29c2b7bc4191b9d1cbb2d88e5d2319caea9b192aa506bbaf3e6a02ac5f4a

  • SSDEEP

    6144:3XrR2y97R5cgpiM2SnYMHnVsCbLabP+xcq1wj47RioTcOsNuNtS:HtLJR65MNn3HnVsCbjcqeU7RtTcrsNtS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\50475cada15eb668be856127f1f3e0f0_NEAS.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b0ea6ed849ec040589f330ce571e66d3

    SHA1

    5e8ca776a1cd1acd87f8d31835f65c9f04e48614

    SHA256

    2bc2c2beefe583f1a8b09d8854e2bb4effd6c78f7b53ed4306ef3b6302061d05

    SHA512

    8974069b369b95ecfa66a160b3191745546d7c87c66cff7a68cb03d436892e3e9ea235490db99b253db38940e8863c7ed823574f8c65407a8afd0a8f2a8d98f2