Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 18:49

General

  • Target

    17e1292fd2531c1c08c5075dbdefc4d0_NeikiAnalytics.pdf

  • Size

    403KB

  • MD5

    17e1292fd2531c1c08c5075dbdefc4d0

  • SHA1

    8d95f9b3dd679bee3aa28b5629c266d1e4026786

  • SHA256

    bd1a0c65364d7dc50593df723aa64d81307e151765e997813e621784aa23ca0b

  • SHA512

    5a496ad70cd6670d35abd3828a932689b30781351e5ee4bd5e5241e71d1e5ada980348bb238989a058ed680f5e916fddf99a89b40f13fd5f7f6847b443a67e2d

  • SSDEEP

    6144:mWgTzKo6nNhyIewHS84SRXaiWwNs7CkQt3SolEkeLKpWwgAkhJNwe2WHaMl:sKRzXbHShSR+RQtCol9edwgAkhUKHF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17e1292fd2531c1c08c5075dbdefc4d0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    647ef22ed28d554866c81e747cd99fe1

    SHA1

    5853cabcf29be437e443f396e4c9bef6d1352432

    SHA256

    5778bed378a355a4209ca6faeb7a795e3ad5896dd37abf27dbe6fb6165b33c23

    SHA512

    553fc7be51b5669e7f088a201f81c63d599a05c6ae69a9a4af033665891daca156a212efd6b8c341f233d3fde63087e8f4e44d092ec83926ca15ef832e316e93