Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 07:37
Behavioral task
behavioral1
Sample
DE-Rechnung-Reber Markus-38162-2024-06-25_085909.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DE-Rechnung-Reber Markus-38162-2024-06-25_085909.pdf
Resource
win10v2004-20240508-en
General
-
Target
DE-Rechnung-Reber Markus-38162-2024-06-25_085909.pdf
-
Size
81KB
-
MD5
e4f68ea4d8eac8c0d5122629675e21c1
-
SHA1
5435f97e1e39d39a0e6f539fb42a5f16e287eb2d
-
SHA256
9f550d468bdaccbcce6eb2da8cc75a136ed286b38d972c05adccc8a6a2774ba4
-
SHA512
e0c5c28a13c36d96dc0068145f281fbf60d2be5d2e61965cd3885176cadffb320d094075b50fe98e2028ba1cbab8fe57992f0604120a6254036b3959dbbfafd5
-
SSDEEP
1536:0yOD5Y0012ddHknisGqjD8DEy1/VpHF9pdUXAqH0+O6kT6ojKw6ehZyg:0yOdYhwd5kPODEyPpHF9pdnqH0+OjTRd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2940 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2940 AcroRd32.exe 2940 AcroRd32.exe 2940 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DE-Rechnung-Reber Markus-38162-2024-06-25_085909.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2940
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD505e55f3d33220032e3b6a50387f68827
SHA1631dfad5187591fcb4036afe37a4cbc4373c0465
SHA256592fcf9ffbceb9fa6f1bbdc0958e9256b73433401eabff2735ef0487e2bf4604
SHA512da8c08f2af2eef30e6d807a0463026793178a2aeb47e8ae33ba3fc7500630a4b7665f2e802fbea9f6ef7b94a87175d2743ba2460a8ed17dc3739ee6ad3717ec8