Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07/05/2024, 19:49
Static task
static1
Behavioral task
behavioral1
Sample
16dbe2fa5c7cf9740992ddd8ed3e5550_NEIKI.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16dbe2fa5c7cf9740992ddd8ed3e5550_NEIKI.pdf
Resource
win10v2004-20240226-en
General
-
Target
16dbe2fa5c7cf9740992ddd8ed3e5550_NEIKI.pdf
-
Size
134KB
-
MD5
16dbe2fa5c7cf9740992ddd8ed3e5550
-
SHA1
6216a10bf4ee0d7d1806bc2fd713a15289ffa773
-
SHA256
7e39799f694d3db7df5c1f724a8f2c4bae095c060bbfe16449c78457610e8211
-
SHA512
eae40f2f54c00728e3faaaa7584a0d504793ecbe8ee58025e2b7e79bf9d0d26099faa9983cd390872cb3ce11e7e8efccf38e7c18cf47feda0bd81ed52407e2d7
-
SSDEEP
3072:RuDtXVPO9MOBKs+R1OVB5w1luAjLBBmmvIsXJArTGAVA4F:RuDtAOaKs0bfI8ArTA4F
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2256 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2256 AcroRd32.exe 2256 AcroRd32.exe 2256 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5263eeff77ff4f6420439e472ceb75422
SHA12609d5378e6e97644d934ee999f1e6f805c5f8ad
SHA2568de08f0775344f88630ea6d2fca10611ca94731058f8f33fed0374de316e92af
SHA512a40124c56509e7ba9e89275fd7dbe3177bf20b1fc0faba9729bc672105f31c5a7920dfa2c34bf5e965e8d6aa22455af8467c522d8853c55b5d237117143d1e45