Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
29/06/2024, 02:27
Static task
static1
Behavioral task
behavioral1
Sample
4ef1e9ac805d26e349facaaaed7f8f2ea5683dee65151e943500cf47844f1181_NeikiAnalytics.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
4ef1e9ac805d26e349facaaaed7f8f2ea5683dee65151e943500cf47844f1181_NeikiAnalytics.pdf
Resource
win10v2004-20240611-en
General
-
Target
4ef1e9ac805d26e349facaaaed7f8f2ea5683dee65151e943500cf47844f1181_NeikiAnalytics.pdf
-
Size
98KB
-
MD5
c07613162ff9ef00ff6a53bc134b4ad0
-
SHA1
53c9266545b0bc52a7a33fe9fe066d4a7ec607a0
-
SHA256
4ef1e9ac805d26e349facaaaed7f8f2ea5683dee65151e943500cf47844f1181
-
SHA512
8b71ace468c0b722e211ad6639911c2bc81354161fc4141e0c5e5d078dc1cf061790d4384b20dca0ff37ab490367f26f4f2f34cd3141e621187a04f93aa036dd
-
SSDEEP
1536:z/C8XVTYDy+m7HUcRNhvpych9DXixHVTXxLmdh+CEJOQgoRMB8xnwDtn1YpVNLU:z/C8XVUS57W1jxaX+CEYQgoRgDtn+bg
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2440 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2440 AcroRd32.exe 2440 AcroRd32.exe 2440 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4ef1e9ac805d26e349facaaaed7f8f2ea5683dee65151e943500cf47844f1181_NeikiAnalytics.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2440
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57efe00b6e31c56ba0e3f727485b8f65f
SHA16f970d766af618c2dfd8d6bb328ef9f246db53a3
SHA256c50046339560094f83fc5c5a5857a38ec3f5cc0db5d5aada84dceb1687cc63f5
SHA5129ca5baca7891bc34cbd39cc854da51db401bd79a8feef402c749b9f91c5139bcb3068c3c3db1c20ee507df5f956e0084bf671b89ccda798dc393b38144ca1ba4