Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 21:02
Static task
static1
Behavioral task
behavioral1
Sample
1b005a28f9dbb5312079e1e55cfb1ea9f57a054768084faf9ceabdcdc8cd9392_NeikiAnalytics.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1b005a28f9dbb5312079e1e55cfb1ea9f57a054768084faf9ceabdcdc8cd9392_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
1b005a28f9dbb5312079e1e55cfb1ea9f57a054768084faf9ceabdcdc8cd9392_NeikiAnalytics.pdf
-
Size
91KB
-
MD5
11419d0639a536158239e502a6ca9910
-
SHA1
42a5b642c36b398b0d771ae3bf285863482c9ed1
-
SHA256
1b005a28f9dbb5312079e1e55cfb1ea9f57a054768084faf9ceabdcdc8cd9392
-
SHA512
fd3ed8d44a7642f42cd6d7ce3ef68e072762b6cd1264660943b342e607df0ed5274147bd5ef328e4e97ed55d667955dde9ecd98f557d3b6f24cf9fdc7e243e88
-
SSDEEP
1536:uMIWRMi8NdpjjdPiJaOclmiMv1sqJ0r5pH37deMlYJyBtU/Wdvw7jDSe:uWRMvdpjxPi4Yi830r5pH37dfYABtU/9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b005a28f9dbb5312079e1e55cfb1ea9f57a054768084faf9ceabdcdc8cd9392_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD583100e82e4c23dd5f239fb1a2879f19a
SHA1eea9e8d72ab56bce4d12fa5d66b4ddec3e82fa38
SHA256d7feb0dc7763a62f0da589003ebc82646e4e35d53c4afdd5defd0e034cf5a983
SHA51265987d1c65a3d34366419f190236a8df4fcb368f64f690dd800f7223d6c174d54403417dfee3e4a7cd93a1379856e17867a63ca958e8e276b4494324d27b1f94