Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Inquiry Doc2pdf.exe
-
Size
732KB
-
Sample
240129-sg741acea3
-
MD5
cc9320801a411bae88d4293006f8fdd2
-
SHA1
00995a1f3b4f14ffc260f17a9d2294671832b861
-
SHA256
5a948b605fbabb59ea28244fdf05cc6980a82057fa1cc1138a1cba3569b9a294
-
SHA512
eb0e0f52e30c33613b86a4365af8134acb03d6b1c9c0310ea439da0192f79e8d7380bb10cccd81fb917e6979e6fc59c2809473d54df47ca9da458a475ad27c3b
-
SSDEEP
12288:LdTKGZrAHW3XVcJsWcv6QL8B2rA4tO5yoEZSsc2RUzSZQ1HkLdU+0bS:L/SpHcv3rAeO5VEIscnmyb
Static task
static1
Behavioral task
behavioral1
Sample
Inquiry Doc2pdf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Inquiry Doc2pdf.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
Inquiry Doc2pdf.exe
-
Size
732KB
-
MD5
cc9320801a411bae88d4293006f8fdd2
-
SHA1
00995a1f3b4f14ffc260f17a9d2294671832b861
-
SHA256
5a948b605fbabb59ea28244fdf05cc6980a82057fa1cc1138a1cba3569b9a294
-
SHA512
eb0e0f52e30c33613b86a4365af8134acb03d6b1c9c0310ea439da0192f79e8d7380bb10cccd81fb917e6979e6fc59c2809473d54df47ca9da458a475ad27c3b
-
SSDEEP
12288:LdTKGZrAHW3XVcJsWcv6QL8B2rA4tO5yoEZSsc2RUzSZQ1HkLdU+0bS:L/SpHcv3rAeO5VEIscnmyb
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-