Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

a0b360a5f5...KI.pdf

windows7-x64

1

a0b360a5f5...KI.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 23:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a0b360a5f529ecfc6e099679c3c13640_NEIKI.pdf

  • Size

    412KB

  • MD5

    a0b360a5f529ecfc6e099679c3c13640

  • SHA1

    f012e35840f45b79c3672ad455943b950b419a02

  • SHA256

    57fe537e7d1a33ceac2aeb9f9a8e9d99e9e8d2ad3300ddc98deba454e0f09f65

  • SHA512

    8a0da890a92137a498ef02d4b2e38f9857356d040d026f57207ca14dbc231a00b79eb8affcfe87244e52113eeefd187d493f3712c24187a6be2c3a98fc5a1eee

  • SSDEEP

    12288:WV9hg0XC2MoHODzZjRuV5k6CgFvhfisDL:WrhNXCeuRMVK6jvhKsv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a0b360a5f529ecfc6e099679c3c13640_NEIKI.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5b7953401b546a316048a8caccdb8135

    SHA1

    6988501aa568dfd1a54932b1d692f78049542792

    SHA256

    9e34bd6515932f8e15d7f4f73be48b14167b0a8dac22383d576c401dee719ea9

    SHA512

    af3a2bf14ae25c9cf8b2f3500be3258d3aa5a05b145e49ceb1d5cbb330311ca656fe6655142c98f86a0cd2e4d9e70a0bb9e00155c532474883847766bd70e2be

    Download Submit