Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
06/06/2024, 11:23
Behavioral task
behavioral1
Sample
0d2e758caad11dce159a12275084cf90_NeikiAnalytics.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0d2e758caad11dce159a12275084cf90_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
0d2e758caad11dce159a12275084cf90_NeikiAnalytics.pdf
-
Size
75KB
-
MD5
0d2e758caad11dce159a12275084cf90
-
SHA1
9c0c0e8bb6b6994941534704f405ca793adbbf0b
-
SHA256
d9272946dd7e21377c0dcb20ba7ac14aba26302f5f0d1c49bb1347e0c7a7949a
-
SHA512
8ae44ad2ef9de11ec6d92aaead000aaefc5390a69e65bbf872c16fc2b74a64e02f97f722f87edf36f06ce06134f2cfceb66f014d049cadc4772ae530e6f02b70
-
SSDEEP
1536:HJVF/ppSLrG1eMEd1ZKM/+mlJIKxd8fCWx0eQFFCZ14tyU:pDpLsMiSMGCdhrFCQ/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2824 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2824 AcroRd32.exe 2824 AcroRd32.exe 2824 AcroRd32.exe 2824 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d2e758caad11dce159a12275084cf90_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2824
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50a438866f150a53905709d3282803432
SHA1658021c08899b23cdac3944d33d2407053a8ca62
SHA256faed8ceab5680abeb834f39d7717914886e8729be2c924cf7bab2b9b9ff2f7ea
SHA512c231f0be40252292e775a4c8ec5837bacc3d1b5d2b23d58d1ff975b2e717c32b7480ef9349b36a783060569499f303e5c5919b882844393fb2789212d4f30c85