Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

27/06/2024, 23:04

240627-22fd6azanj 3

Analysis

  • max time kernel
    118s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 23:04

General

  • Target

    37472b761f44b4b8956858716a45b3a5ba3c393b1de01f4cb6d3e40f92ea12ba_NeikiAnalytics.pdf

  • Size

    79KB

  • MD5

    257ab5485cedb94fe66fd361620a53a0

  • SHA1

    618fa3bdc375f326d619b854e263bafadc03a9fb

  • SHA256

    37472b761f44b4b8956858716a45b3a5ba3c393b1de01f4cb6d3e40f92ea12ba

  • SHA512

    8ea661ace9163d6e665400a180f3806eb4dd56c7ed62ea8a4fa2ea602169986f48bb68b0d52e435a0af8618abc7eba9c6597135e414d1fe1fbbb2f37455f50bf

  • SSDEEP

    1536:SXrVzr3HUWXD+PXCgtilIdEoFZmROM57yk61KabA4o8DfD:mrV8Wq7IToHYn7yk61FbY8H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37472b761f44b4b8956858716a45b3a5ba3c393b1de01f4cb6d3e40f92ea12ba_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1aba0555d800b78e94949206cc0bebaa

    SHA1

    b40f036659526767aac51a8179d173b4937e77df

    SHA256

    c78f2679243758587e669178517c8a02a750f27ee395a05ab12272332d68758e

    SHA512

    16713281de6757108d702f5210165c621da792ce3bf8709de39b47897d6554426c61d62dea912349d5929f7619ebe753979e8fc7a3617eb6733a158b2b77d390