Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

8c845b3e0c...KI.pdf

windows7-x64

1

8c845b3e0c...KI.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 23:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8c845b3e0c6be0e3d85ed59e0e1ab8c0_NEIKI.pdf

  • Size

    32KB

  • MD5

    8c845b3e0c6be0e3d85ed59e0e1ab8c0

  • SHA1

    d8b7c49d278f8de1c453951e8bd763c718039ddf

  • SHA256

    61a953d5f70bce7b4647ff2ae306a09ab231bba78c96c6abe1303e1e2581aaa3

  • SHA512

    c2a99c4841c7000482c5b88c69ab314eb8e0f5bc4c5d79dc797b86dd41118037befdbeed8e20f24b31973c9d3befd477f01ae1069de1f5804b0020b977b01060

  • SSDEEP

    768:V353kZe+33K3IPcVbkgzidsuft9y6rl3wJc0YiOx4XSjjFYLpRr8Fy6n:DhuFaJNW2SFYLpgh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c845b3e0c6be0e3d85ed59e0e1ab8c0_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4e83a73f33b22c14daa7268bc06ba31c

    SHA1

    e78b7dd6d4c47d52bdee42d1b09c97683c27c3a8

    SHA256

    ee888f832575e31df0a32cbc1ea12c2a697e0f52df9ef8df25bd1bfdccb763ce

    SHA512

    d17979c10dfeb6be903f77e3c648c9cea660a1e7ce63ea23eac0a37976a8e7388ba9fc47d1e9cea7d599d14d04000bad60c49db4815befeeeae8458630cccdd0

    Download Submit