Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 21:45

General

  • Target

    2ed3bf989f85b1c8566141f836888070_NeikiAnalytics.pdf

  • Size

    95KB

  • MD5

    2ed3bf989f85b1c8566141f836888070

  • SHA1

    b261aaaf87696092069accde997d4883264c51f6

  • SHA256

    8395dcd54b7412bb442f0366d09afbed9a306d0e41ef933f4b093e2b911edc59

  • SHA512

    f5d6ef553766c5ea85e6d09b964bbcf1b04bdd6696fe3c8792055cd8fe5975327073d58a63f54d4260af740699b0a09582f49217f3a101a4fc2c6709340a07c4

  • SSDEEP

    1536:R5e0JcqcJjSQ4KfRh8nSm7rmTyQF5cBpRjyJ+3uVQ11WyYMwQyGFt8t6QQ1W2dw6:TeOcJGORh8SrTyQFipyuJ11WyY+yKt88

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2ed3bf989f85b1c8566141f836888070_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d8ac208a790983c39418f15318506a42

    SHA1

    6f528c89ee1e386584537ffa26c8f1840bc194d5

    SHA256

    c7344e4dd0f6b77573229504da80c20bca9b0695659ddd598438ce8e71ffd6c8

    SHA512

    da18fe13975f8479c667d407e495de9a9c96bd8383ce208081daa682f3cb95a96b2c31f77b8377375c8274de49df321953df5a975b6fb578610e8bdeeef194ac