Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
4PingCastle....1.zip
windows7-x64
1PingCastle....1.zip
windows10-2004-x64
1Active Dir....4.pdf
windows7-x64
1Active Dir....4.pdf
windows10-2004-x64
1Newtonsoft.Json.dll
windows7-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1PingCastle v3.0.0.pdf
windows7-x64
1PingCastle v3.0.0.pdf
windows10-2004-x64
1PingCastle.exe
windows7-x64
1PingCastle.exe
windows10-2004-x64
1PingCastle.exe.xml
windows7-x64
1PingCastle.exe.xml
windows10-2004-x64
1PingCastle.pdb
windows7-x64
3PingCastle.pdb
windows10-2004-x64
3PingCastle...er.exe
windows7-x64
1PingCastle...er.exe
windows10-2004-x64
1PingCastle...xe.xml
windows7-x64
1PingCastle...xe.xml
windows10-2004-x64
1PingCastle...er.pdb
windows7-x64
3PingCastle...er.pdb
windows10-2004-x64
3changelog.txt
windows7-x64
1changelog.txt
windows10-2004-x64
1license.rtf
windows7-x64
4license.rtf
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
24/01/2024, 14:07
Behavioral task
behavioral1
Sample
PingCastle_3.1.0.1.zip
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
PingCastle_3.1.0.1.zip
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Active Directory Security Self Assessment v1.4.pdf
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Active Directory Security Self Assessment v1.4.pdf
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Newtonsoft.Json.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
PingCastle v3.0.0.pdf
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
PingCastle v3.0.0.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
PingCastle.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
PingCastle.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
PingCastle.exe.xml
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
PingCastle.exe.xml
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
PingCastle.pdb
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
PingCastle.pdb
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
PingCastleAutoUpdater.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
PingCastleAutoUpdater.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
PingCastleAutoUpdater.exe.xml
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
PingCastleAutoUpdater.exe.xml
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
PingCastleAutoUpdater.pdb
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
PingCastleAutoUpdater.pdb
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
changelog.txt
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
changelog.txt
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
license.rtf
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
license.rtf
Resource
win10v2004-20231222-en
General
-
Target
Active Directory Security Self Assessment v1.4.pdf
-
Size
385KB
-
MD5
356475c95e42167c8075a221e8b49afc
-
SHA1
ab4889a2432c826f095c7a24254c7a085f15d0bc
-
SHA256
7f3f063afadb8067936ebf449a24a5228587d01481fa270809a2802487b3798c
-
SHA512
84f465dcdff9f6e59b0c62f56439cdca6c632dcde9bb336979b48413f1db1ab755ae05b55b67ee5a7a8535e8731bbf894b10459b86bd9335dcde3fbb0f355feb
-
SSDEEP
6144:obZ0LYpATJeJNiHIrT+qdNheeyoKnVTuUfsPCiJJW4vLGY5Q6SJzHkvP:rLYmQJNiHIvVNhhyvnV7fsKiVvChS
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 832 AcroRd32.exe 832 AcroRd32.exe 832 AcroRd32.exe