Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 22:27

General

  • Target

    2e8c463cb97d032353f2af312064beaddd817a58d0b7ed706cd8b665066a6cb4_NeikiAnalytics.pdf

  • Size

    448KB

  • MD5

    6466ab6a6792f83a8a8cee8b5669ad30

  • SHA1

    c1e187eed64a675bc55520bd8219549f2ba8da7b

  • SHA256

    2e8c463cb97d032353f2af312064beaddd817a58d0b7ed706cd8b665066a6cb4

  • SHA512

    25d8d7f079333d4339486166e7d4743c67224dc806e91a84d8c02753590fb961ef1ae7c62a7735d359f10a668f0fb58ba8685857605605de22c7bfd5c18c7738

  • SSDEEP

    12288:Ia8kERxxTLAl4PzoQc87IpU5086Il4VvjOUnMAKJV:h8xzLAlQcQc87qIStyYS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2e8c463cb97d032353f2af312064beaddd817a58d0b7ed706cd8b665066a6cb4_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6dee88696e1328d99fd5d6e498274f76

    SHA1

    443663ac4d86d9ef8485f121720c08f5b63953e1

    SHA256

    c12abbe31e71aabb1dfa949155df3bb38538805ff1a29b6b8c3af7b36b671ed7

    SHA512

    aa79443baa326babb531903c586b14165303508abdc3bec91070dcd01f11993a4f85c717fa3a6f842e63fb5c196b2baff6eaa0aa7278bda8a4b63e335a935b6e