Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

5

Static

static

5

@lbzvm+s84...45.pdf

windows7-x64

1

@lbzvm+s84...45.pdf

windows10-2004-x64

1

Resubmissions

25/05/2023, 19:48

230525-yh3tkacg61 5

25/05/2023, 19:46

230525-yhcx5sca93 5

25/05/2023, 19:33

230525-x9vrlaca49 5

25/05/2023, 19:33

230525-x9k76acg2t 5

25/05/2023, 19:27

230525-x59d7acf5t 5

Analysis

  • max time kernel
    129s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2023, 19:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    @lbzvm+s8460+397+6728+591+46 5+6684+ zbdovis+ 2839+8045.pdf

  • Size

    33KB

  • MD5

    d3945d4eab98cf2d48e34cff91a3c843

  • SHA1

    a73d10b005208c06ab772c635d581473dcfeaf20

  • SHA256

    18a29ebd902a52add72e3eecb6a234e221fb91b24ae776394703b2c138beacb1

  • SHA512

    4006351b7b9df138115ed0f4e893cb025c492fcb2f9b6f221eb1ba741be89572cb0ccc4cb8edcd0b5bad93606dc0f53b50d858bb3e648516e85ca5f86c269608

  • SSDEEP

    768:C4/gHYX/wnbFDyzeD1Wkzu30XkLGHj+4R0EzkavINL+xPt1xv:v0YX4nxD0eJXU6+4MqI1aZv

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\@lbzvm+s8460+397+6728+591+46 5+6684+ zbdovis+ 2839+8045.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:820
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:1496
    • C:\Windows\system32\AUDIODG.EXE
      C:\Windows\system32\AUDIODG.EXE 0x514
      1⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:1656

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/820-54-0x00000000011B0000-0x0000000001226000-memory.dmp

      Filesize

      472KB

      Download