Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
03/04/2023, 01:09
General
-
Target
NBRD Presentation.pdf
-
Size
1.2MB
-
MD5
1fbe90837b3023a776498db5f70f88d0
-
SHA1
0ceb5d22cec8d3090082d771d9ec7912caded6aa
-
SHA256
b4043a1c2ad385cd2bb87c7caf8d10e4ba3bc4c01ddee0699b92f2eb667f4bf0
-
SHA512
c4999dd4ad58ff726ec9027133a6e8df2ed8ecc869379af174ec704462dc5cb76cf6557c1dc6573987b0d08a5d7780a7b4bc0e55ed3020c165fcdad3fdd9af92
-
SSDEEP
24576:/qByyyzAzwK9CTwVlVhMU4IDAg2Ks329oT1QiMb2u6ECyuPC0747PfiBcQJD:/qByyy2jnk0Dhs329i1o6C+47XiBcQJD
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NBRD Presentation.pdf"1⤵
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx