Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 20:30

General

  • Target

    2023c6266bf29027f2e83dd0f2585f70_NeikiAnalytics.pdf

  • Size

    76KB

  • MD5

    2023c6266bf29027f2e83dd0f2585f70

  • SHA1

    540727449440b150427fb9dc5673d4381ef51283

  • SHA256

    e5446ce5fb95a17818fa97863ce158044022ae9fdd0bcbd601fd190f67f4206c

  • SHA512

    fa50e8f4d7f0526f7b97c31db30cd6d0aaaa31b92dce5e0687b7c446cc5aa3fb478c7b38949054506cb1750b44b2f5058aa3b8832408a1f071ac22095a217286

  • SSDEEP

    1536:3lPvOWOLTEgd0EBAfGOWB3nhNEWA0xOSdL6fdm9hxTqN+Us7fwaFFz:9OWOL8QAf3WJfTxvdMdMxTq7XaX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2023c6266bf29027f2e83dd0f2585f70_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    99c6db387b3afd4520968fc45d6fd614

    SHA1

    5d79a86bd2d0097c04840e58b67a75530cf467a7

    SHA256

    2bbd1a505a4b4c6f545c0f4855462da09d2b5f2f84cc6dae873a4d3c35de2822

    SHA512

    8f95beedd46f3331b064e6a4ba3a79e8eedb41af61b9b2c8efc8dae052af4e8ce0d6c3d4ed6b95f1e1e5b26caa3d7a4b1bb7c282054b16ad4a0b7ebb18598d8c