Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
09/05/2024, 04:36
Behavioral task
behavioral1
Sample
f21a98234cafacde6c308e6641834710_NEIKI.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
f21a98234cafacde6c308e6641834710_NEIKI.pdf
Resource
win10v2004-20240426-en
General
-
Target
f21a98234cafacde6c308e6641834710_NEIKI.pdf
-
Size
83KB
-
MD5
f21a98234cafacde6c308e6641834710
-
SHA1
d92430c2ba9801057df16daed7876ff7b40186a6
-
SHA256
fd0c99456c75dbfc87bc4aa4b3a9fd0e56d4dcbe9ec7a2b6f5c0472676951a48
-
SHA512
4152f4f91f786bf78b876e6adfdbdfab05580d375c3803832566d19e133052a16702801d1f2fa6b49a4aef0d147b1ee5b2918e1c606775fcee2dcbbd9741e597
-
SSDEEP
1536:9x2Q0/DsbdavSwMG5oa8suVwDKYfZ7Yao9/W/+2Z17jyjNkWApO6MqdfXZ:7B0rmzE5o/sSg7YVf27kz6MOB
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2084 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2084 AcroRd32.exe 2084 AcroRd32.exe 2084 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52d3ad8d7e8a24ce016aebb53e4a03c83
SHA126ebdbb63c612e4e7bb9d08c5eed97129a2f367c
SHA256bfdeca32759112d6238e43f70798630723dfc075cdeb24182164bed962b476a0
SHA51250fd0eb36ee674edef9bec47f8bcf69bdf570ad0de72d8eaadc3505a398127d6e075339c30022661d73a4303ed0f1e2efc4e03036ebe806619d32cb384631c34