Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 00:53 UTC
Behavioral task
behavioral1
Sample
4557749464c9289ab0f1d8250f30c920_NeikiAnalytics.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4557749464c9289ab0f1d8250f30c920_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
4557749464c9289ab0f1d8250f30c920_NeikiAnalytics.pdf
-
Size
799KB
-
MD5
4557749464c9289ab0f1d8250f30c920
-
SHA1
95622ff3f4a019c8ca20b39a6c65364edb29ecc6
-
SHA256
f814c602f1d93399fcc49c877830c4188b69a1ffb1c006b34ef0322d2ad573b1
-
SHA512
537be08f7b9aec28e045f3aaf950549b88915a28a25eb42dea85bef55aa3fd1fe690b30226cab23d9113441b3fc910f4e64a71bdb718d2a0fafecb073d214c10
-
SSDEEP
24576:4vbl0bmsR/ptoA2yKSi7/FOq3KbwG61tAO:4vB0bmstpJ2R7/F/6QZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2368 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2368 AcroRd32.exe 2368 AcroRd32.exe 2368 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4557749464c9289ab0f1d8250f30c920_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2368
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e6bcbfa79208c45a783b20a9c0fd5fd5
SHA15e950e6cfa30d0604eedb91857b544d90a7dc845
SHA256cbe3dde6ef0e8efcd3e299ccd433a389aec326aeea57f16c4838ea6327819a73
SHA512b9d00d96e886dce5749a8389cd2bb98a984388162e688fdbeb72faaf9b9194c0d42099c3b986568246db4206bfb54ec196e5ae01fb0c6a9a57719d34ae21b2ff