Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
02/09/2024, 00:44
Behavioral task
behavioral1
Sample
6c6214848396a52ed35427f3121f57f2f52c79adefc2d97dcbf02f3f8f9d1aff.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6c6214848396a52ed35427f3121f57f2f52c79adefc2d97dcbf02f3f8f9d1aff.pdf
Resource
win10v2004-20240802-en
General
-
Target
6c6214848396a52ed35427f3121f57f2f52c79adefc2d97dcbf02f3f8f9d1aff.pdf
-
Size
78KB
-
MD5
2b5096bf4c68706f02ff9106a1496fd1
-
SHA1
58f94c0e0017f4e1d7b818460b6a27e1c4e12b4d
-
SHA256
6c6214848396a52ed35427f3121f57f2f52c79adefc2d97dcbf02f3f8f9d1aff
-
SHA512
d502595cc2295e8674f7f6080824f2de00a62f11f9b21b314fab8307cadf3807cd5748d77341f9c371f75b06b03cc4da9fe9d524938fb4b5e8d980c3f938d43c
-
SSDEEP
1536:0FxIuJy5oAbNnUlbdQGS11nlw7B/dfTmluW1UPJE+2IS504AcTW8pO7WK4C:GI2sZnUtBSnnQB/dr2MpgAc+71l
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AcroRd32.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2720 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2720 AcroRd32.exe 2720 AcroRd32.exe 2720 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6c6214848396a52ed35427f3121f57f2f52c79adefc2d97dcbf02f3f8f9d1aff.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2720
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5aac5e22c46239d5b34002baae013a8fa
SHA15a528a0d8d4159f7574fa0d747deee593f1094d8
SHA25672d98721ce51c6855a0c62af2d4acc5be8e81b4cbb777e093844d555b51c0e27
SHA512cbdb3e447ded628acc2644fbc2439c49a90b31c7862c1cd7f04f910fe490677252397b2de380f181f1d66b80b95ca366ef1ed2fe25583e29d1268f52cd6d059a