Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 03:00

General

  • Target

    98e2f3b8b1c4c41bcb698653625a34c0_NeikiAnalytics.pdf

  • Size

    44KB

  • MD5

    98e2f3b8b1c4c41bcb698653625a34c0

  • SHA1

    95e06492f0feb4fc120dc894ecd4038fd59193fa

  • SHA256

    557e6fd3c884ed48913a3cc6fcb20a25ede2509c502d9f57a48904ae5138b726

  • SHA512

    7d43bf80063689e70be7521f6a42a8b4eacec621c191bbdac1ece017e95e1a2c3e7f27c73406828377beac348e03008fddf8a4a3e0cbeeacbabd0f7e320c4a6c

  • SSDEEP

    768:WK2gqfgubSfrqOkR3sd8X4LuLpu1NtE4pp74QvoXUa9NQqIKMvGlUFNzfG8/9SAS:WMlLH6qyEeuQ7m3dMnxilgEkOA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\98e2f3b8b1c4c41bcb698653625a34c0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    df4b78ebe4ba9bd08254b9e723a1bed0

    SHA1

    4022d806fcbfeafae3a1d8703ea4861b9521996a

    SHA256

    67e37d3928aa2e95968da198520ce7d7b60230e87ddabf7010294a5eae035bf9

    SHA512

    90bfbb742cd4544cde380cbe0d737979731c052039483ea17b8b2bcedc7ca57ff276f9b772449628015b40a8e7836fb879464b112c97ccbf6737600b246dcc61