Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
01/09/2024, 12:52
Behavioral task
behavioral1
Sample
e057b0f063c0094c6bb31d2a01d3598bf1f709f90c3a4443dbffd71ebcce1d97.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e057b0f063c0094c6bb31d2a01d3598bf1f709f90c3a4443dbffd71ebcce1d97.pdf
Resource
win10v2004-20240802-en
General
-
Target
e057b0f063c0094c6bb31d2a01d3598bf1f709f90c3a4443dbffd71ebcce1d97.pdf
-
Size
89KB
-
MD5
b26e8396fe2e85540a6367bd102a5b3e
-
SHA1
201cf891824356b95384280b0087551cdc30b494
-
SHA256
e057b0f063c0094c6bb31d2a01d3598bf1f709f90c3a4443dbffd71ebcce1d97
-
SHA512
c2597c98a868749a4cfff051d50afca75e35d55aacc2165998b0d1490e3a1de119ad610e649c4796facba56e64fa8bfa39967b16fe19f988a19b568fa5cc5f41
-
SSDEEP
1536:Hd9uMEyns0EC/snln84I8Pd1y8nqwJqGYxL3ueIsudn3fxKdY4ghWznSbN5rjpWe:99ua4C/mm4h+8nnYxLuaudn3fL4gsnkT
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AcroRd32.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1696 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1696 AcroRd32.exe 1696 AcroRd32.exe 1696 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e057b0f063c0094c6bb31d2a01d3598bf1f709f90c3a4443dbffd71ebcce1d97.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1696
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5164dbb9d3815a5aeb1d393cf8f9f099b
SHA17678168a0fdb933afdb6d20f2f3eaf88ccda5bf7
SHA256ebba0ba896ec78c33c7f4f904443b06edbfae1b03f6231fa1d01a55f033f4e64
SHA5128c4d624096f5c3ee704ae69c83a0a0b9adcca052dffd200185f5272cf3c52ddb40c1755bbf2cec76590473bae9d04dffbf985ef64d9b060e9cb98ad0b92103fa