Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 22:19

General

  • Target

    25bae158560ef00eba5976e1f2c9b6128372e768f6909baac565223973b58abe_NeikiAnalytics.pdf

  • Size

    103KB

  • MD5

    afd9ba5039496d971569f18f4bf90dc0

  • SHA1

    4b90d640f69f8bed860d51e29db61862362bba5e

  • SHA256

    25bae158560ef00eba5976e1f2c9b6128372e768f6909baac565223973b58abe

  • SHA512

    8b10d14f9266e6d9308d4f43a46a397663a256999e4ca74696e6086211f5db698f3e24b1e9ab8d8d5cb943ecf9aa8f61de799be7995d77a80d9c8cdfd9228aa6

  • SSDEEP

    1536:DbRYJv2+8RfmAGqird1fzNWN5D8lwpnldfzNKQA0AeDiaR0d7Zxy3sW+vmO6rjr:nCgUfLk5KwpnnfzAn8RkXy3CvmN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\25bae158560ef00eba5976e1f2c9b6128372e768f6909baac565223973b58abe_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a91c2fc4119bea6a532899867f4ae998

    SHA1

    60981d7961ce4e6b87f8a6d7bd04f61d93871a49

    SHA256

    ed58053d34b65ccc4c78a0ae526e50da6816c9ed5556e5f0edf09375205a8d98

    SHA512

    dad50ca5ecc0b6e9d97727822e6e05988a630ff9b679b1d0c957901112349c656822d70a134d71fa24a023d7fd73a7dcba200ff7237effc692712b5916642645