Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

4

Static

static

3

Russian mb...gs.pdf

windows7-x64

1

Russian mb...gs.pdf

windows10-2004-x64

1

Russian mb...19.pdf

windows7-x64

1

Russian mb...19.pdf

windows10-2004-x64

1

Russian mb...B3.pdf

windows7-x64

1

Russian mb...B3.pdf

windows10-2004-x64

1

Russian mb...VM.pdf

windows7-x64

1

Russian mb...VM.pdf

windows10-2004-x64

1

Russian mb...al.pdf

windows7-x64

1

Russian mb...al.pdf

windows10-2004-x64

4

Russian mb...90.pdf

windows7-x64

1

Russian mb...90.pdf

windows10-2004-x64

1

Russian mb...2B.pdf

windows7-x64

1

Russian mb...2B.pdf

windows10-2004-x64

1

Russian mb...IA.pdf

windows7-x64

1

Russian mb...IA.pdf

windows10-2004-x64

1

Russian mb...ED.pdf

windows7-x64

1

Russian mb...ED.pdf

windows10-2004-x64

1

Russian mb..._1.pdf

windows7-x64

1

Russian mb..._1.pdf

windows10-2004-x64

1

Russian mb...al.pdf

windows7-x64

1

Russian mb...al.pdf

windows10-2004-x64

1

Russian mb...k1.pdf

windows7-x64

1

Russian mb...k1.pdf

windows10-2004-x64

1

Russian mb...k2.pdf

windows7-x64

1

Russian mb...k2.pdf

windows10-2004-x64

1

Russian mb...al.pdf

windows7-x64

1

Russian mb...al.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    153s
  • max time network
    32s
  • platform
    windows7_x64
  • resource
    win7-20230220-es
  • resource tags

    arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    13/04/2023, 16:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Russian mbts/T-72_CIA.pdf

  • Size

    1.2MB

  • MD5

    71a59a651df25471038f4543c78d82dd

  • SHA1

    55bbe9992131145f0dbbc58d0f1eed3daa92b6a0

  • SHA256

    6cf873bbdfbcf38e85b50756cb04a046750ad1995da7a9093cdf8de404f517d8

  • SHA512

    13376774701c9b7c82857383feffb155db48cb65f74167bf255a0da7a065b2f5e125e403adbd96161e76c81105822a68d1441c9995ff9acadd108fddf0d3480d

  • SSDEEP

    24576:ft3H4cPyx7oNb0WRH6WAGAmc5HjSUo3S/6TWn/1Igi77v5Le1HLHBvXQ+4:fx4cPq7oF3AGQHjPmSyq1Igi1e97Nm

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Russian mbts\T-72_CIA.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads