Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
28/06/2024, 22:19
Behavioral task
behavioral1
Sample
25bae158560ef00eba5976e1f2c9b6128372e768f6909baac565223973b58abe_NeikiAnalytics.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25bae158560ef00eba5976e1f2c9b6128372e768f6909baac565223973b58abe_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
25bae158560ef00eba5976e1f2c9b6128372e768f6909baac565223973b58abe_NeikiAnalytics.pdf
-
Size
103KB
-
MD5
afd9ba5039496d971569f18f4bf90dc0
-
SHA1
4b90d640f69f8bed860d51e29db61862362bba5e
-
SHA256
25bae158560ef00eba5976e1f2c9b6128372e768f6909baac565223973b58abe
-
SHA512
8b10d14f9266e6d9308d4f43a46a397663a256999e4ca74696e6086211f5db698f3e24b1e9ab8d8d5cb943ecf9aa8f61de799be7995d77a80d9c8cdfd9228aa6
-
SSDEEP
1536:DbRYJv2+8RfmAGqird1fzNWN5D8lwpnldfzNKQA0AeDiaR0d7Zxy3sW+vmO6rjr:nCgUfLk5KwpnnfzAn8RkXy3CvmN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2264 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2264 AcroRd32.exe 2264 AcroRd32.exe 2264 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\25bae158560ef00eba5976e1f2c9b6128372e768f6909baac565223973b58abe_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2264
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a91c2fc4119bea6a532899867f4ae998
SHA160981d7961ce4e6b87f8a6d7bd04f61d93871a49
SHA256ed58053d34b65ccc4c78a0ae526e50da6816c9ed5556e5f0edf09375205a8d98
SHA512dad50ca5ecc0b6e9d97727822e6e05988a630ff9b679b1d0c957901112349c656822d70a134d71fa24a023d7fd73a7dcba200ff7237effc692712b5916642645