Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07/05/2024, 21:19
Static task
static1
Behavioral task
behavioral1
Sample
38798f1fd5b130e2b16e32b9836f2f00_NEIKI.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
38798f1fd5b130e2b16e32b9836f2f00_NEIKI.pdf
Resource
win10v2004-20240419-en
General
-
Target
38798f1fd5b130e2b16e32b9836f2f00_NEIKI.pdf
-
Size
102KB
-
MD5
38798f1fd5b130e2b16e32b9836f2f00
-
SHA1
30ac38f6c41a5088e52bc35c0d527d057dabb9fc
-
SHA256
79d64201ddcca3728a48c2f20b7cfcf5b97bc3331a4f042834d2dff686712c7e
-
SHA512
5e1e7c63e076072ee271530688c32f0880051416a491eefb7ea2f4a9379ae59d3b20a5acf65009e9645ba5c014be4bbfe55fdeb133b88422b9fa23db028a083e
-
SSDEEP
768:lsspc9XAjeMe5p24BWlQgXBsNqHNlVong+1V5p2kwsffz5p21NHw5p2zaXrLmXr8:lsszjenbJB8+bdwsfbbENQb+o
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2940 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2940 AcroRd32.exe 2940 AcroRd32.exe 2940 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52c8a275d476f83b6645ae9db6c482f68
SHA19378e72f2dac31c70190750c6813b8959105c04e
SHA256f8a9bafb12dbde65a94aabb888424b1611987657bfd17b297d5e9504ec9f6a38
SHA512680fc2fd1d9b491985d99276f5ec0fc222c8305e22af587d86f71dbb43cf4f30224737f06c39fde4aa45767860ccb77f7265ca8bea5eaa9de33bc474f5c92d1d