Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

2c42c11d0a...cs.pdf

windows7-x64

1

2c42c11d0a...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 02:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2c42c11d0af8ec47b8eb4aab1ae787e0_NeikiAnalytics.pdf

  • Size

    73KB

  • MD5

    2c42c11d0af8ec47b8eb4aab1ae787e0

  • SHA1

    65d27cbd71e86f32e282aacc3837ba3f14b71bc0

  • SHA256

    f42845da109f01f5201f544c359874e8ad86a36f9acb1e7aa1004865f1b52b7f

  • SHA512

    4056010baa149ead0ab9fe8bf5d87dc43ec2c1c0a7616abc9bda7fb08c25b1d7995e76d225f644a8f006b36decb722aa0a6a397b8ec4c17781610378d90ce1a1

  • SSDEEP

    1536:HZ6ExO7jLmoqsdzzoNd7hwjdIoyWC1+NK83hpiA4dxeGWKHZf26Yfjpzcnak4JIE:IEahJpzoPhYIoyWCAU4XiA4HZvYfjpqW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2c42c11d0af8ec47b8eb4aab1ae787e0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2b5e77c93311d542b22dfc31caf6510d

    SHA1

    7df81cf4a2343ad042a85314f46ce2c3c515bfe5

    SHA256

    c07af6eb81fdb3d07f8ce00c7f6e94c135c8b174f968e9ed2d2cf22645a2a6bd

    SHA512

    6b83167963461ff782e886e7cabbc439103c96ac24888a47ed59e82de904debd7c31816e1afd8d1a74c41738f56246bbc6a9a3a86364846a90f7fdc0cf8fade5

    Download Submit