Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
30/05/2024, 17:53
Static task
static1
Behavioral task
behavioral1
Sample
The Global EPC Project Management Forum Amsterdam 27-28-29 November 2024 The venue will be Leonardo.eml
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
The Global EPC Project Management Forum Amsterdam 27-28-29 November 2024 The venue will be Leonardo.eml
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Upcoming events 2024 (1).pdf
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
Upcoming events 2024 (1).pdf
Resource
win10v2004-20240508-en
General
-
Target
Upcoming events 2024 (1).pdf
-
Size
1.0MB
-
MD5
bd76f299952a129525c03b09d555c2a8
-
SHA1
c95add186b11465a6d28a426846a14520b8e2c1c
-
SHA256
e4ae341a338356b27fd750a56df33a8ad599a82959115c9ad4d7978b04071538
-
SHA512
2ee0c6e0c5f413ac9875535da9d261e4e14a52846acbdf5e350acef725427b2e60d050f7039963ccfc76dcfd29b9b9aa28a256899774519efdfd3b4ddb8eb2ed
-
SSDEEP
24576:w//zgAiY4pBPxugXCFLyt27xcmkdNm76wswxGzTJw4RSpam:w/7qYetfCh7x1qoiz15RSkm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1664 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1664 AcroRd32.exe 1664 AcroRd32.exe 1664 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53a3b932dcddfa74dcd99edca6baeba1d
SHA11f5e469a70578cc5f74c83e55daba356268d2c5e
SHA2563704231f419d149d338caf1432239f5773602a2296f17392c3e6310f32ce9dab
SHA512c7ddd95bfe4e7237eda1476ab5724a7b35932d85a2bbabff481f192bea2652cc76f7b1c847ad86b4d651eb7a57e462806533dcff8919de83cbb0925ad8a5eafb