Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

증명서�...16.pdf

windows7-x64

1

증명서�...16.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    28/02/2023, 22:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    증명서발급및인쇄_20230227_114616.pdf

  • Size

    599KB

  • MD5

    8666817d3fbd798072137fa8af8ac7e8

  • SHA1

    b9bdb34fc6f5c844fd2785601442127d8bac6524

  • SHA256

    9dd7771b4d3b433189f5dbac36fa540c4d50fc9c2dd3c838d7bd3eb496ac08fc

  • SHA512

    f5e7e6ea45865d6cb70ebae7a52e3a6de179714996f20decfe9770ce7cb093ed6d66887b61201df6b8ff43fd35ddbc5cd87c87731c28e3d36da3d802c8cd7b30

  • SSDEEP

    12288:P4CpZSxBb8NnseHPWeO2oLPv0HAfAat6YK7QL3L:F/S7bgke0LPsgfAC6FsL7

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\증명서발급및인쇄_20230227_114616.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/928-54-0x0000000002690000-0x0000000002706000-memory.dmp

    Filesize

    472KB

    Download