Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 03:15
Behavioral task
behavioral1
Sample
d22ebeadcd354fd997dccbc0e818e691727b3949a53fde38f585b66e37e674ba.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d22ebeadcd354fd997dccbc0e818e691727b3949a53fde38f585b66e37e674ba.pdf
Resource
win10v2004-20240419-en
General
-
Target
d22ebeadcd354fd997dccbc0e818e691727b3949a53fde38f585b66e37e674ba.pdf
-
Size
76KB
-
MD5
1674042b8e7a54b98a177f4b91f5beeb
-
SHA1
47bfb892fb27319af9f1cd6183a002c3257f6b70
-
SHA256
d22ebeadcd354fd997dccbc0e818e691727b3949a53fde38f585b66e37e674ba
-
SHA512
b5985004f3af8e56a19d927dd100cc925b219ffa5d68eb5f70a387368ab8a65d3319088932807cc5f20944e545c8108b8a803486d0fb5b20a374899c1e43550c
-
SSDEEP
1536:TRZrV0H5wm/Xb1xS6ro77isGVk5d5PQFlMGWKgltTPXEiOC8k:7uH5Pj1xS/visGuPQFlRWFlZXEm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2844 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2844 AcroRd32.exe 2844 AcroRd32.exe 2844 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d22ebeadcd354fd997dccbc0e818e691727b3949a53fde38f585b66e37e674ba.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2844
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59e2a41a14337122b1845c805fccb3f26
SHA1b8886fbc8eff8174ae42dc3ac2e4ced5bf1afcdb
SHA256cfd5b93f576016c36f84e36dd1f07d545393996564ec6ed45caaa1477c72a7ba
SHA51251d9c3a962f23d1168bf55894bb24060ca3b142a292e5ec9bac03912635c59a0ef5c4e5ffb11eb81ce9fde30145d07322022482acbc6806a753c81c88cb02b85