Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

57dbf138e6...cs.pdf

windows7-x64

1

57dbf138e6...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 02:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    57dbf138e681840536417c7539fe4b00_NeikiAnalytics.pdf

  • Size

    79KB

  • MD5

    57dbf138e681840536417c7539fe4b00

  • SHA1

    45d6d464062b1eb3e61dace75dd886bb2959ac23

  • SHA256

    dbc54681959f0d4f2fec263232399f57c4071ed9aa44b812f4a190d637d0670b

  • SHA512

    5ec2586d12a9a7bfeda2150b4394b4194182354afdf045f04aee6084058e44ea74d03a769f5da195a09dbaf4b5791bcbb23514c3fa3580fd7ac49f0d59930c94

  • SSDEEP

    1536:3kqLt91f/aAOiigS55bGFsirf1qUhQY0sNZoHFiZKWT/aAKO24g:r591fxOryscf8oleFHWT/aA9i

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57dbf138e681840536417c7539fe4b00_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    30b784b878291e28cedd054d10331b7e

    SHA1

    a2b9d574204219808b5e81971d077b6fbec32daf

    SHA256

    c0471a62914ac77b4f8e526fa014994e5b2a5a0af340f52b6e374e6438c507fb

    SHA512

    ed8b674b56c87f8961afeb9dc7cb164b1c0a5acb196b5cb6f1d57a4a96c35a95f03eb4f8abed61d28d21142f5398fb9d2abbd252458d0d27e76e9ebb982b3d16

    Download Submit