Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

0e6630173c...cs.pdf

windows7-x64

1

0e6630173c...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 12:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0e6630173ce37ce64f236035a66d1890_NeikiAnalytics.pdf

  • Size

    395KB

  • MD5

    0e6630173ce37ce64f236035a66d1890

  • SHA1

    939d5ef7c20eb1343c4cd4a96231c6ff78b54552

  • SHA256

    7ecbeda902105d690b4e40934321c44fee6990b5c4f2979aec2e2a708c16c5e1

  • SHA512

    ade1e3d843cdf3223666c482d5781a14023fa44a476bac7ff1acdf48a4c3a7add985cc9fa31c8ea17758f13ebbafc5916a2c0df5756ac9861e9382f2803317d2

  • SSDEEP

    12288:xwZ8mGhVmy+i58Fas4EMrfJ8FQPXEiKyz:xwZ8mGhVmbi5Ua1jrBnKyz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e6630173ce37ce64f236035a66d1890_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    43aee337c97d21d7d5414f934cb5f0ec

    SHA1

    b675016119c2853d83691c162cb11f9ffb6590d8

    SHA256

    eb9f1532fd784b47b6d104e672bf020b85c9a59484daa3f883d22c225f32403b

    SHA512

    81809af562fdb2d29ca5efdec77e598433124463fc8ce0ac76cb8c23082a70f5ca5c76a0947a3864afb73f3406b8dca814bd112618e1b8bc4b47734ba80f1cfa

    Download Submit