Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 23:02
Behavioral task
behavioral1
Sample
8c845b3e0c6be0e3d85ed59e0e1ab8c0_NEIKI.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c845b3e0c6be0e3d85ed59e0e1ab8c0_NEIKI.pdf
Resource
win10v2004-20240226-en
General
-
Target
8c845b3e0c6be0e3d85ed59e0e1ab8c0_NEIKI.pdf
-
Size
32KB
-
MD5
8c845b3e0c6be0e3d85ed59e0e1ab8c0
-
SHA1
d8b7c49d278f8de1c453951e8bd763c718039ddf
-
SHA256
61a953d5f70bce7b4647ff2ae306a09ab231bba78c96c6abe1303e1e2581aaa3
-
SHA512
c2a99c4841c7000482c5b88c69ab314eb8e0f5bc4c5d79dc797b86dd41118037befdbeed8e20f24b31973c9d3befd477f01ae1069de1f5804b0020b977b01060
-
SSDEEP
768:V353kZe+33K3IPcVbkgzidsuft9y6rl3wJc0YiOx4XSjjFYLpRr8Fy6n:DhuFaJNW2SFYLpgh
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2548 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2548 AcroRd32.exe 2548 AcroRd32.exe 2548 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54e83a73f33b22c14daa7268bc06ba31c
SHA1e78b7dd6d4c47d52bdee42d1b09c97683c27c3a8
SHA256ee888f832575e31df0a32cbc1ea12c2a697e0f52df9ef8df25bd1bfdccb763ce
SHA512d17979c10dfeb6be903f77e3c648c9cea660a1e7ce63ea23eac0a37976a8e7388ba9fc47d1e9cea7d599d14d04000bad60c49db4815befeeeae8458630cccdd0