Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 19:40
Static task
static1
Behavioral task
behavioral1
Sample
2256832ec452da955cea81b4a2f820b98d5d99ebe3c715a83b8cada36b28332d.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2256832ec452da955cea81b4a2f820b98d5d99ebe3c715a83b8cada36b28332d.pdf
Resource
win10v2004-20240611-en
General
-
Target
2256832ec452da955cea81b4a2f820b98d5d99ebe3c715a83b8cada36b28332d.pdf
-
Size
120KB
-
MD5
0464338d9abdcb918e2b7aae3670552c
-
SHA1
b0ab029ece44a1b7c89ce9994c248f481459c79a
-
SHA256
2256832ec452da955cea81b4a2f820b98d5d99ebe3c715a83b8cada36b28332d
-
SHA512
cc1a535291d0b8d9ab1395e35c9f6171aed72b29c66c4e9c6d769ba4f36896de4e4a54199bb612b6bf69792c735559a2cdcf3092a05cc38ac05ca3c96109cb82
-
SSDEEP
3072:YJywTBG9oPDvHxG3VMgzBfKSHiPS7RjSOK6AX/J9sIQbij:YG1ASFSLBsIv
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2976 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2976 AcroRd32.exe 2976 AcroRd32.exe 2976 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2256832ec452da955cea81b4a2f820b98d5d99ebe3c715a83b8cada36b28332d.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2976
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ca3d72d77a7c03e28caf20b421466f09
SHA11ab4fd9bf2e1dfcc9dbc7df82cdf1458d766233d
SHA256a682af3fd18d149f6e3f7e98d71795d7ce136499605f8f27c3bd71e0e341f068
SHA512bb17203262e635e1051edd289e6cc1db1587b6b3e6d0f776f7dbb0a0651e7c59b2f98c966dd707bbc00948b1683582b8a1f3ca7239749e961efc614625f82227