Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 22:27
Behavioral task
behavioral1
Sample
2e8c463cb97d032353f2af312064beaddd817a58d0b7ed706cd8b665066a6cb4_NeikiAnalytics.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2e8c463cb97d032353f2af312064beaddd817a58d0b7ed706cd8b665066a6cb4_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
2e8c463cb97d032353f2af312064beaddd817a58d0b7ed706cd8b665066a6cb4_NeikiAnalytics.pdf
-
Size
448KB
-
MD5
6466ab6a6792f83a8a8cee8b5669ad30
-
SHA1
c1e187eed64a675bc55520bd8219549f2ba8da7b
-
SHA256
2e8c463cb97d032353f2af312064beaddd817a58d0b7ed706cd8b665066a6cb4
-
SHA512
25d8d7f079333d4339486166e7d4743c67224dc806e91a84d8c02753590fb961ef1ae7c62a7735d359f10a668f0fb58ba8685857605605de22c7bfd5c18c7738
-
SSDEEP
12288:Ia8kERxxTLAl4PzoQc87IpU5086Il4VvjOUnMAKJV:h8xzLAlQcQc87qIStyYS
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 756 AcroRd32.exe 756 AcroRd32.exe 756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2e8c463cb97d032353f2af312064beaddd817a58d0b7ed706cd8b665066a6cb4_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56dee88696e1328d99fd5d6e498274f76
SHA1443663ac4d86d9ef8485f121720c08f5b63953e1
SHA256c12abbe31e71aabb1dfa949155df3bb38538805ff1a29b6b8c3af7b36b671ed7
SHA512aa79443baa326babb531903c586b14165303508abdc3bec91070dcd01f11993a4f85c717fa3a6f842e63fb5c196b2baff6eaa0aa7278bda8a4b63e335a935b6e