Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 21:36
Behavioral task
behavioral1
Sample
2029ecaed2b4f166aefc360f4cd98e20_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2029ecaed2b4f166aefc360f4cd98e20_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
2029ecaed2b4f166aefc360f4cd98e20_NeikiAnalytics.pdf
-
Size
11KB
-
MD5
2029ecaed2b4f166aefc360f4cd98e20
-
SHA1
447cdaab819d6a0efb8652abfdff95db91b0005a
-
SHA256
98b508c7c5e19041c7e5ef6832edee3984ebdc871b4a6cc53031b69bfbabe566
-
SHA512
6769b9c4f9908d12a84fdd9680bf1d687eb85ec0e749ee6c6cbdb2c2bc4e638a9159bffef4c7d84e43531a28b0007a644f6f550f98627c6b69e24add0206ca7f
-
SSDEEP
192:ydML0/LX0jOavgOiUhJNqosLN6N9yBpNzMUKjf+WdHST0dqInpz3XzlKRQWeC4xk:ydML0/LX0jO7ZUhuosLN6N9+NlKjdHS7
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2856 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2856 AcroRd32.exe 2856 AcroRd32.exe 2856 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2029ecaed2b4f166aefc360f4cd98e20_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2856
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59e583998b245d0b73183f9bc55800468
SHA1704d46ba31d4e895685d379ab024246aa9a56383
SHA256a19c8e319bedc0238755f3b451bca6eb8460795dff9f082886b7774f86c267c9
SHA512e99447d7dd24f528947d691c564998dca7f50a2b8bb04a5b539c7a4f2d665df543cc069724a7e565c8d2ced08bbebeff13f60239b09bdcf3114fe66ff88d3534