Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 03:57
Behavioral task
behavioral1
Sample
7031a9606c3c2b213cd6f2bf956dda60_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7031a9606c3c2b213cd6f2bf956dda60_NeikiAnalytics.pdf
Resource
win10v2004-20240226-en
General
-
Target
7031a9606c3c2b213cd6f2bf956dda60_NeikiAnalytics.pdf
-
Size
961KB
-
MD5
7031a9606c3c2b213cd6f2bf956dda60
-
SHA1
3a45b96073dfc6741cef786b227b8d4ca5638550
-
SHA256
88d3549ce1df528c51488852aa234b4d0aea3277f1a76fe725b0adf5c293befa
-
SHA512
6155c88ce8a17718ab85ac3ef9bc174d44214f4be3c672e514892986bcd2423c90a1d2eca1c80e0b874658bd2ada955a3b02491510adf912e6e2a9893ac3217e
-
SSDEEP
24576:do3KxATjjvABwU86ZNciPU5I5K7XvUxQhZaVfWTyqfd:dIKxgjj4BwCsSqI5K7LZaRQyql
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2172 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2172 AcroRd32.exe 2172 AcroRd32.exe 2172 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7031a9606c3c2b213cd6f2bf956dda60_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2172
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54e0086542d066c45658f858ba50c7ee9
SHA1673bd3760ba81ac505cf04145be4ca06f88436a4
SHA25600159042ab3b75fe8455a46cb32970d0bbd39b4c329d8106c16bec020f62f41e
SHA512adc6881a56c3933bc33a0f3620f1fbc2c923e58c7a11613b118dcb75bf0ffea2179551d2b64843d2c50bff45514fae0ea4c72d92bd7a565627dc1510166c33c4