Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

RQ039423.PDF.exe

windows7-x64

6

RQ039423.PDF.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RQ039423.PDF.exe

  • Size

    745KB

  • Sample

    230830-glxchsaa43

  • MD5

    a9236435368f55bbb462fd7d03a832b2

  • SHA1

    75d703203a24ff7e6a0f451598837d57304bfa27

  • SHA256

    abe0a6708bda47a3fad184d79e29e780300ce705aa45f04ee506e055ed50dbb8

  • SHA512

    e19dc3e29dd1138bb4067f41168ae458811b0713f0f6530199b7a3fa4429de306bbb929dcf9b74058937250db02514d38aab820862c8b88e35b5fdbf0554b697

  • SSDEEP

    12288:pv953k9WSr3qJlVsLGxQKDx/MDJI/BLHCPtUKSVgVI3ny6iZ7btZIlrcHewyQJ3y:pvnk9RMlV1xQKDx/MDJqBLsUNyC3x+7Z

Score
6/10

Malware Config

Targets

    • Target

      RQ039423.PDF.exe

    • Size

      745KB

    • MD5

      a9236435368f55bbb462fd7d03a832b2

    • SHA1

      75d703203a24ff7e6a0f451598837d57304bfa27

    • SHA256

      abe0a6708bda47a3fad184d79e29e780300ce705aa45f04ee506e055ed50dbb8

    • SHA512

      e19dc3e29dd1138bb4067f41168ae458811b0713f0f6530199b7a3fa4429de306bbb929dcf9b74058937250db02514d38aab820862c8b88e35b5fdbf0554b697

    • SSDEEP

      12288:pv953k9WSr3qJlVsLGxQKDx/MDJI/BLHCPtUKSVgVI3ny6iZ7btZIlrcHewyQJ3y:pvnk9RMlV1xQKDx/MDJqBLsUNyC3x+7Z

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks