Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

China-Link...re.pdf

windows7-x64

1

China-Link...re.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2023, 14:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    China-Linked Cyber Actors Hide in Router Firmware.pdf

  • Size

    651KB

  • MD5

    25a175cc62c22b8246f2c7f7f2230757

  • SHA1

    e2c8bde5a7ba2ea24174ff309e0647525bea1605

  • SHA256

    c98a3d79bda15c171adfc6d364937f9d64bde017df5282e7f99bc56ba93fcbfe

  • SHA512

    a31aa76d35af21d3429bd3042037fdc7991568ce887e133f66397ee949a5fabfa426e4192a74b4b2fceafc5c55a220b642d05a059217860b8a76cdfdc1a96824

  • SSDEEP

    12288:HOvoQ/p22rj2Oh6z+U6Rlr9pr45X7COVjNI8Ld05y0NuIMiRoqmZW3dw/wn+5VOZ:HOvJBF2OEyDjydtdq2qmENl+nOojCBfJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\China-Linked Cyber Actors Hide in Router Firmware.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    611bcc6e6f5fb3ea49aa5587a54921ba

    SHA1

    052d60ab76eecff9b360007866f1c7fdc5e4f1c1

    SHA256

    bd7be99cd6cf9e978e048fb2de305eb94181d01c7931af2916c863eaa5ffe07b

    SHA512

    abe647c6aa07afb8b6c5e4c0acb07d72ec8d4ec6b81d6b58fbd8e1edb8782dc7201df28a77eb6535d43e18fc63d9e3e090bd0e53876f2e464fc572dcf9bc06c8

    Download Submit