Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

3dfdae1f1a...cs.pdf

windows7-x64

1

3dfdae1f1a...cs.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 03:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3dfdae1f1a0895e018afdb4a18b363c0_NeikiAnalytics.pdf

  • Size

    86KB

  • MD5

    3dfdae1f1a0895e018afdb4a18b363c0

  • SHA1

    120833ead59b72a3c1455a80adfc2c25b0fe9b1d

  • SHA256

    33979d063caa1d09ef4380ed89a834544e03998ec5073b3ff83c6064c2c13a5e

  • SHA512

    88f4c68f4b0678ec3b7d24f68da26c91e4d44afb51b5f2447239ceb4f41d1c209c70dfd1b72b4d300a484510de25e4c45eb481e945c81efb82902d5505c1f3dd

  • SSDEEP

    1536:9v+iMRVlJlc8UnDMKboqGmsL1vqKz9jOrhsKpjiOGz:WRVLM1boLmsF/1O1scWL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3dfdae1f1a0895e018afdb4a18b363c0_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e55fc0f966136995625a02f44cfc8bda

    SHA1

    38e56acb5328c63bec98b69a6750f72e07f2045f

    SHA256

    2456f2390bf93d566b777ee0062e52b5bd6189be27e19259cee2ae9eb0a72416

    SHA512

    00426340623235b261e5a4c33d372adf3710fcee78b004b74a29da65e79f8bf44fe32b83657d0c7b4f6e89478bcd70da6ad0206030bf927511ad7a1da717b3df

    Download Submit