Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
01/09/2024, 13:08
Behavioral task
behavioral1
Sample
d3c5b5a0097fd3fbac9ca58115c72f214a67a8b53d031a475d63bcd86fad6ddc.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d3c5b5a0097fd3fbac9ca58115c72f214a67a8b53d031a475d63bcd86fad6ddc.pdf
Resource
win10v2004-20240802-en
General
-
Target
d3c5b5a0097fd3fbac9ca58115c72f214a67a8b53d031a475d63bcd86fad6ddc.pdf
-
Size
81KB
-
MD5
c9b0ecd301c1dbed6904d63b2ff7fbd5
-
SHA1
c654aba70e3c82f8534bf82085e5aec41463ba87
-
SHA256
d3c5b5a0097fd3fbac9ca58115c72f214a67a8b53d031a475d63bcd86fad6ddc
-
SHA512
4497e83cfea78dfd83630eac7942f2f8db1db1bbf41ce3487502a87234cd0d2c3a534052ad325870fafac9bb4bb708dc2cf1640019a99afe03033788d54cb064
-
SSDEEP
1536:08vSpcvH7nkod3eaddeiiNEhNRaTA4AhAWKXdEUZWbpONiWyIiCoc8bHu+V:nSCvH7nkoteUdPhTyA4Ah02UbNEPi8bB
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AcroRd32.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2728 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2728 AcroRd32.exe 2728 AcroRd32.exe 2728 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3c5b5a0097fd3fbac9ca58115c72f214a67a8b53d031a475d63bcd86fad6ddc.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2728
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5321a70085175a2a47ca891bdc07c36b7
SHA1e7e157d04ad75eb940f792f5b275c20738b4a043
SHA2562db81a1a6e4e57b45c5a17ffdaaa3598d79f649033ed376433124e4b4603ca28
SHA512ed9d105219a19a235ff4f53eb31185f2ce63daeddd528a4232b99d72c9a6e8f28ddf36834559132e8fe5bd9be982cf7b2bdb672cf7d4a39f7a8d767af27109e8