Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
03/09/2024, 18:45
Behavioral task
behavioral1
Sample
0f6fbc5cf25d8f8ece81cb5b9d8be5284909741842b18bb863e53521fd2a25f7.pdf
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f6fbc5cf25d8f8ece81cb5b9d8be5284909741842b18bb863e53521fd2a25f7.pdf
Resource
win10v2004-20240802-en
General
-
Target
0f6fbc5cf25d8f8ece81cb5b9d8be5284909741842b18bb863e53521fd2a25f7.pdf
-
Size
54KB
-
MD5
0541c7bff54e6b2a92c855608c288118
-
SHA1
fbb46f52aed0a1ffb20cc51053f161f87f8dbadd
-
SHA256
0f6fbc5cf25d8f8ece81cb5b9d8be5284909741842b18bb863e53521fd2a25f7
-
SHA512
a331443b4fde1e0a40e3c63eac3247a1d58c82198c20511832c7613b59f6be7ac36e91c464d6602feaf4947cf971df96e80d8c76447382fb871f1553d72739a4
-
SSDEEP
768:8uzdNIggou41dMV+foYlP131weQ6jSJtik+h/HUTz2+KQYU7k/uo87gUP5InQ:/zIW1dMV+foY5uJ0PZWz2+/YB/8gRnQ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AcroRd32.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2212 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2212 AcroRd32.exe 2212 AcroRd32.exe 2212 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f6fbc5cf25d8f8ece81cb5b9d8be5284909741842b18bb863e53521fd2a25f7.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2212
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c6fa54761f39e5d6025a19e24f74971f
SHA18358372114dfa43a173e23a36d89db0b107118b3
SHA2562a80df166f1e805786b5451866d0325138e94accc577f37d9945fe30665f36cd
SHA512b9bdf8258122f919093f86ed0d77681cd4777ccfd68e0341dcbc6713093465875bece28165a4bfce8986dbe1455234f3fd72aaf584ccdd9e9b7436a56d7c39c4