Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

5

3606a19b3e...cs.pdf

windows7-x64

1

3606a19b3e...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 13:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3606a19b3e0804dd37e86001c36c38f0_NeikiAnalytics.pdf

  • Size

    148KB

  • MD5

    3606a19b3e0804dd37e86001c36c38f0

  • SHA1

    131f30470229798767487535530a248ab2209b6b

  • SHA256

    9196a741758d48b33028be10a55558bf43f1860c0e1dca61b38dab4cdaedfd2e

  • SHA512

    d870b1ddd0f3b32249d9add04d3af93864b7ef66cedb9d9db1cb38f2e2250f1ca16508ad5ca0a957ea92827c91ed5a27f0589087ba36ea0010b7cda178c3f59f

  • SSDEEP

    3072:L4YPVi56CLq0PahjnvBmH7mvUjZmfkQ+oqmrBbzfdSYx:L48XIKjnvB+mFfknoBxfd5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3606a19b3e0804dd37e86001c36c38f0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d61a9ecef2b421ffc2c0538dbe07869a

    SHA1

    bb64e5330608779ae3f583a943b1e3c97f8a39dd

    SHA256

    487e6eeb97929ac721aa6070d45b67c751daf8310aeb98ed48ecf4c24eea354d

    SHA512

    c0e686b84b2d58c5c7f856f75a91ee575583201dc6778de2aa8a5fb570b6dd8a6275d6ae888616ad88417ba8bfc7a7571110646ed98b9769e6b3c4eb5a4f6cc3

    Download Submit