Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    29/06/2024, 02:27

General

  • Target

    4ef1e9ac805d26e349facaaaed7f8f2ea5683dee65151e943500cf47844f1181_NeikiAnalytics.pdf

  • Size

    98KB

  • MD5

    c07613162ff9ef00ff6a53bc134b4ad0

  • SHA1

    53c9266545b0bc52a7a33fe9fe066d4a7ec607a0

  • SHA256

    4ef1e9ac805d26e349facaaaed7f8f2ea5683dee65151e943500cf47844f1181

  • SHA512

    8b71ace468c0b722e211ad6639911c2bc81354161fc4141e0c5e5d078dc1cf061790d4384b20dca0ff37ab490367f26f4f2f34cd3141e621187a04f93aa036dd

  • SSDEEP

    1536:z/C8XVTYDy+m7HUcRNhvpych9DXixHVTXxLmdh+CEJOQgoRMB8xnwDtn1YpVNLU:z/C8XVUS57W1jxaX+CEYQgoRgDtn+bg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4ef1e9ac805d26e349facaaaed7f8f2ea5683dee65151e943500cf47844f1181_NeikiAnalytics.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7efe00b6e31c56ba0e3f727485b8f65f

    SHA1

    6f970d766af618c2dfd8d6bb328ef9f246db53a3

    SHA256

    c50046339560094f83fc5c5a5857a38ec3f5cc0db5d5aada84dceb1687cc63f5

    SHA512

    9ca5baca7891bc34cbd39cc854da51db401bd79a8feef402c749b9f91c5139bcb3068c3c3db1c20ee507df5f956e0084bf671b89ccda798dc393b38144ca1ba4