Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
06/07/2024, 22:27
Behavioral task
behavioral1
Sample
61cc4c65cd63ac7cef742a5b9d091f667623e1689ea9f4a9aa966d4edef07030.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61cc4c65cd63ac7cef742a5b9d091f667623e1689ea9f4a9aa966d4edef07030.pdf
Resource
win10v2004-20240704-en
General
-
Target
61cc4c65cd63ac7cef742a5b9d091f667623e1689ea9f4a9aa966d4edef07030.pdf
-
Size
275KB
-
MD5
d63cd9ef32e992311106f9d04283b6b7
-
SHA1
f2d909785ac4cec27d7ec10577118f9ab344e72c
-
SHA256
61cc4c65cd63ac7cef742a5b9d091f667623e1689ea9f4a9aa966d4edef07030
-
SHA512
cf9bed2aa8007d2e7511ec84e5ef93f95db436447e887cae03cd0f461f213cefa1c8df8b945d1f121021c1ed0131ce872108340127dadf34026c6d9e9c13b052
-
SSDEEP
6144:JtEpO3l3xth220XD4887HSSHSYz9hSSqZat9d:TEpO3l3Dh2LT4887HHSSqs
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1916 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1916 AcroRd32.exe 1916 AcroRd32.exe 1916 AcroRd32.exe 1916 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\61cc4c65cd63ac7cef742a5b9d091f667623e1689ea9f4a9aa966d4edef07030.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1916
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c1f8b49ed7c5962fb71c87c8d06a1d35
SHA1659316447acbf8eadbe88001e43746aecae99554
SHA25644ed5c277f9e57293e852bf3715f3935dfc4f91c93b5207ece8b5b14fff74cd9
SHA5127f8042f5fb729aabde20f8b8ac7dfeaec3f1e9f67baad4345fa00df5588c274320adcc5d242626c0b0a2f1b831b648d59bc95fc715cf54f37fd23a44de23a151