Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 06:45 UTC

General

  • Target

    7901a0b3385b64317ea3872e03398b90_NeikiAnalytics.pdf

  • Size

    238KB

  • MD5

    7901a0b3385b64317ea3872e03398b90

  • SHA1

    2b057f01145914651cb3bb16a31922dc949a06c0

  • SHA256

    109fbb798a2188c5a7c7fee6cf345ba4c6bb2f2a89db5de19ff7abb740e52ef2

  • SHA512

    72af67d616f0ab8bd76c3f9fe081c1f6543ab35f1e5177b14078a03ddc727ca66ada32b087370a944d9f2ca3e3695f5ce1e7949defc37c52fc3091dd0845a257

  • SSDEEP

    6144:tee9FGRjEaUd5RPhi9+v4k8FgH1ood2SoXyX0ZGu:0evG2d5RPhi9+v4kFH1DWXwlu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7901a0b3385b64317ea3872e03398b90_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    387220c23aceca035cf409183ad7afa2

    SHA1

    f3543b9937191402ff840603cb5eab8d4cd8264c

    SHA256

    8e57cd126c8092439f4c941a20ec153d1a6bc15dc05857e57535bc3b3f8f0015

    SHA512

    5402474109474a46da5693e4a302f2bf9346768f50863d181b65a018347cccce07da28b45fab4337cb4c4e26678dc9431df1cee4425da027f153aebbd26f1a36

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.