Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 00:26
Behavioral task
behavioral1
Sample
40560f43879c99c09a4000b506bbbf80_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
40560f43879c99c09a4000b506bbbf80_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
40560f43879c99c09a4000b506bbbf80_NeikiAnalytics.pdf
-
Size
2.2MB
-
MD5
40560f43879c99c09a4000b506bbbf80
-
SHA1
108cac2289b4ca25f83f5900735c1931d500458a
-
SHA256
27572c95f6f50076395293dbd2a51eae2b453cca896990c1796cf0e2bd7c8a49
-
SHA512
6aa0f4e94b46d9e5844e81b1fd77d1c478dec3edf8e92b0fb8919e98677e18211baa3c55386dae0c470a236416533c8c0c5c02332f4cbe225ca03c9677d3abd3
-
SSDEEP
49152:VsMNqB3RwUCeVF4Oq1Hb38flQzfLW9B7fF2kIycFIszVAef4KB0ED8ll3hiGAW:aOy3Rwnesl+fi3WrbFUIgXBR8lZge
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2904 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2904 AcroRd32.exe 2904 AcroRd32.exe 2904 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40560f43879c99c09a4000b506bbbf80_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2904
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5dca2f6b9f6b10d4f7aa1eef759e0b568
SHA10ef63075e20c64f1031726477e51b5e60cfe8eda
SHA2563d5e88c759920381f8b271c21638e586918bd83702bf36342fb77c706af1615b
SHA51243ba45aeffbd5376b1aa8630414dccae444488c737c3ed3d400144b6aae2124ab5101a623d10d0dc0f0942bd96cf9bd5a86e927fe5ccb772d4d48903f3ebcaa5