Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 21:19

General

  • Target

    38798f1fd5b130e2b16e32b9836f2f00_NEIKI.pdf

  • Size

    102KB

  • MD5

    38798f1fd5b130e2b16e32b9836f2f00

  • SHA1

    30ac38f6c41a5088e52bc35c0d527d057dabb9fc

  • SHA256

    79d64201ddcca3728a48c2f20b7cfcf5b97bc3331a4f042834d2dff686712c7e

  • SHA512

    5e1e7c63e076072ee271530688c32f0880051416a491eefb7ea2f4a9379ae59d3b20a5acf65009e9645ba5c014be4bbfe55fdeb133b88422b9fa23db028a083e

  • SSDEEP

    768:lsspc9XAjeMe5p24BWlQgXBsNqHNlVong+1V5p2kwsffz5p21NHw5p2zaXrLmXr8:lsszjenbJB8+bdwsfbbENQb+o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\38798f1fd5b130e2b16e32b9836f2f00_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2c8a275d476f83b6645ae9db6c482f68

    SHA1

    9378e72f2dac31c70190750c6813b8959105c04e

    SHA256

    f8a9bafb12dbde65a94aabb888424b1611987657bfd17b297d5e9504ec9f6a38

    SHA512

    680fc2fd1d9b491985d99276f5ec0fc222c8305e22af587d86f71dbb43cf4f30224737f06c39fde4aa45767860ccb77f7265ca8bea5eaa9de33bc474f5c92d1d