Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
454bda3c47130e9f150b73980beebe7e
-
Size
1.6MB
-
Sample
240106-e69r8saaf3
-
MD5
454bda3c47130e9f150b73980beebe7e
-
SHA1
6d2138142569911925e1f6c37df8d034192ca039
-
SHA256
ad3262a7c90b9bca6b93019e968110d22947aa2f3b460ab1ddaec6cc0d68b5c1
-
SHA512
e3b3dec27f877660c31bb9d968bc558d64b999c0fddd0ae9b2a25e224238a6e53b9476bd6a5ab55024ed08085919d31801556d537b4c6a773dc0c19fdfabf70e
-
SSDEEP
24576:5WBlI4gAviQo9KASCGnnWgIET1VnhGd7d8vwn3g7OPWjaMckypl3b+K7ozXFm:5MlIevao3jTZG/8vy6RaMVyL3KrFm
Static task
static1
Behavioral task
behavioral1
Sample
PdfFactory.Pro.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PdfFactory.Pro.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
PdfFactory.Pro.exe
-
Size
1.7MB
-
MD5
d4a23c2e0aa8aa0bfae582a5c4d498d4
-
SHA1
9e3fe73900dae0292fd45f179f1c3555bab36667
-
SHA256
5e186433f8dca1e68a791d9bfdb039711fb6df7af51e6405ecc64b00d1ed4591
-
SHA512
5fb0c52656f8f6c516d170eb2395531960f57a5f1882f6e2337f61bde21c0d34b6e99f218f70f957bae27497d71f521b6cc0102d16ce4ca72a2e4aae1c79480e
-
SSDEEP
49152:mklHgDdD+IEVFA5KhmmSxDqg2ZHpttf27Drvu:xHgMVS5KMmSMttgrvu
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -