Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 21:55
Behavioral task
behavioral1
Sample
5b172a538a71ac7fcba4eb9e169fa92edfd99298dbb0cc081a91bc31d51f1d6f.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5b172a538a71ac7fcba4eb9e169fa92edfd99298dbb0cc081a91bc31d51f1d6f.pdf
Resource
win10v2004-20240611-en
General
-
Target
5b172a538a71ac7fcba4eb9e169fa92edfd99298dbb0cc081a91bc31d51f1d6f.pdf
-
Size
86KB
-
MD5
c4475c7109b4af089e0121e3bff2cbdd
-
SHA1
5d54fdcbc2226c83d4d4a41b98caa07b074c3db8
-
SHA256
5b172a538a71ac7fcba4eb9e169fa92edfd99298dbb0cc081a91bc31d51f1d6f
-
SHA512
52307a30df5bac99643178e3e95257b6b9e21b70d7b08befcfadf0f3e8e3d1ec5b871fc061d32807595af584c6a0eeed465cd26687f1fedce26cadc4e2dd6b13
-
SSDEEP
1536:awzAS/4tYhCErXNBUsy3RMqdTOG3fEaJqPmDax4KBWxApOGS1OWcLXoygND:5Q6sCdBUfRMqdTOmEaJqhxY3GwOcyA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1300 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1300 AcroRd32.exe 1300 AcroRd32.exe 1300 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b172a538a71ac7fcba4eb9e169fa92edfd99298dbb0cc081a91bc31d51f1d6f.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1300
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52f70135e3bc00c4c2aba05e2272536b5
SHA10a8e0ea4ddfdb502707be1c8fdb3facd5b408e76
SHA25693e83e778ead6d1d2da8ceb969ca582787ed5b4ee03bb5ebebeeabc69987727c
SHA51221cfa9b762f2552fd7334e1fc649495a426763d59ea7376b7beab9d50a05c9260d10d7b0a96c4beb252d71e28ed2a7f0778afa0e6da71397506c66848ca34dac