Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 11:58
Behavioral task
behavioral1
Sample
Midnight Avenue - Official Press Kit 2023 .pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Midnight Avenue - Official Press Kit 2023 .pdf
Resource
win10v2004-20240508-en
General
-
Target
Midnight Avenue - Official Press Kit 2023 .pdf
-
Size
9.5MB
-
MD5
9b5738cc861823d9efd4dce180d87eb0
-
SHA1
77d01357b7568554b44eab318255d51edc908372
-
SHA256
b89b5e4d3e6e302e11ee6cc178aef9680a82d6ff78fd59774c58e368c8a3e475
-
SHA512
c6f56be502da398a2c6b4fde6543969ca3a3f7485b11f9ee5db54f35e7a3be56acdd14ee4f9dde47e967ca9af5531b0e774d7642fc4cba8e03fb950f97a0827e
-
SSDEEP
196608:Tp/YYdPh1tse5foqK/OE9ZPutwfl3XXXcKREhp/ifutRLgcE9jmIbaSgQPLN:Z3dPrGeeqaWw5cKREvvM98EaO5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1516 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1516 AcroRd32.exe 1516 AcroRd32.exe 1516 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Midnight Avenue - Official Press Kit 2023 .pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1516
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5884baa8b0d2f177501bb202fba7e0970
SHA10030be8e9787741cea1c28d5af8342774ade5b3b
SHA256d4c84e2fbd0be9a485088b0fc13f391e33ab281947a664610dd8bc6419aa2e61
SHA5120d1525fbc1a4fd6b0999fedf434fbb715deb44c22312ecc18900880f25dfcda7811d74945270546687b219f92af09ef050d2e6ac8969ad8afd8f6777bb6dac55