Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
07/07/2024, 00:13
Behavioral task
behavioral1
Sample
8591c97b32031f0f693e19c2266df8538482b90a61ec803890fa2d44ae5eb2ac.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8591c97b32031f0f693e19c2266df8538482b90a61ec803890fa2d44ae5eb2ac.pdf
Resource
win10v2004-20240704-en
General
-
Target
8591c97b32031f0f693e19c2266df8538482b90a61ec803890fa2d44ae5eb2ac.pdf
-
Size
211KB
-
MD5
b057cf18003e4649d973cfdacc2398cb
-
SHA1
f17ebea79081a7a37d1224fc1a82c173699ef2dd
-
SHA256
8591c97b32031f0f693e19c2266df8538482b90a61ec803890fa2d44ae5eb2ac
-
SHA512
322b15657ab3b361050b8bea749f8e36f3f714ae28e26af7e84c3375a77ab0246492c10096d3dbb69190c982bce143138532e94bd722e0ff5e5a978841eb0648
-
SSDEEP
6144:F1Q5F9kvadhFXbNb5MbioKitWQZfGaNrru:FOr9LhFrXMvcQh7ra
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8591c97b32031f0f693e19c2266df8538482b90a61ec803890fa2d44ae5eb2ac.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58f8852cb8f27cc753a31215c5f45f419
SHA123ad209899c1a28d4102e0ced4fa04e3c20f4d9b
SHA256f4f0b891a184795211f0578543efb0545a3a6fd9e6107ba0a3aed5df43f6a235
SHA5120014ffeb367cbc93fe927efd49de6ca702001b59f720a5a9334fe23bb0debe38793bb2dc057ab675d56a08815b9cd9ddbaf56cdbfa4ddfdd886556cd4e7ae761