Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
161s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
30/12/2023, 20:18
General
-
Target
1bb4d170bf361fb9489456a233ecfb94.pdf
-
Size
90KB
-
MD5
1bb4d170bf361fb9489456a233ecfb94
-
SHA1
3d69ae4dd3e06709da1104e27e57911b1b79ae01
-
SHA256
cdca88f4df379f2b1f04c2278d8d0e1731c2537a3ba2037a8c08f8e8a8eac506
-
SHA512
a22c4bc061e5c289f3de505786dd2ab1ceb9618ffc2efe0ebbc85cd67ce84d82b452be66ace6fd2d79e5d5fd7b0133d1f9e388b44ecf730c18b6f7305d0a1f8b
-
SSDEEP
1536:fAPnaa6yf2HQEJVP8mPpbyHs18NjW/fj0W6pOu2andwHwcZAqp:oyaXf2ZtPpbyHsmNmjtu2an+wWv
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1bb4d170bf361fb9489456a233ecfb94.pdf"1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx