Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 01:22
Behavioral task
behavioral1
Sample
2bccfc55c849d64d8107e5fec8d9c3272ad4db0cecac3fc0fabdd98655a0aa8e.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bccfc55c849d64d8107e5fec8d9c3272ad4db0cecac3fc0fabdd98655a0aa8e.pdf
Resource
win10v2004-20240709-en
General
-
Target
2bccfc55c849d64d8107e5fec8d9c3272ad4db0cecac3fc0fabdd98655a0aa8e.pdf
-
Size
4KB
-
MD5
eca90b0d0c7e2779f9e7e11339a04eb1
-
SHA1
48c0fd25ec54aa88bd61bd0e7df234a5a869d9e7
-
SHA256
2bccfc55c849d64d8107e5fec8d9c3272ad4db0cecac3fc0fabdd98655a0aa8e
-
SHA512
53b8a6c56589a5997bded6c0443a0a935c1c6ed7cdb8e9c00b7407a99639d25e11ac83dd77d0e0d87b46cd02d2b1c83a79bcc40186a2a26c5c61a4d64d017cbe
-
SSDEEP
96:ZDnkVXISuTQpQOE6FO57XD/dUK68FVyVzW2EyYBsh5:ZDngXkoBFO57D/dUK68/yVzXEyYB4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2732 AcroRd32.exe 2732 AcroRd32.exe 2732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2bccfc55c849d64d8107e5fec8d9c3272ad4db0cecac3fc0fabdd98655a0aa8e.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b9f4df0f567959af75fbf424bc9b1e71
SHA1b7b21c9666fa9aa9284a436c1384f7f31b07e1fd
SHA25632ec9cb231a9f3fc4e8c9719967f9cbd9eb982443b20575a96011a2871e014c7
SHA5129380119b6b0e2b5a3b223bf9788f2f9bbf5295a90eb23a143e39a1c1c101147c2a3c5a3f431c5090354fe83f039c47f9bc4a999b1838f6673d49f0050d22889d