Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
PDFCreator-1_7_1_setup [1].exe
-
Size
17.0MB
-
Sample
240415-m9gjvsch79
-
MD5
2b0cbab7d9dbb405421f2397967d021c
-
SHA1
9434866971dd357600c9f2b1e31b7893c3a070f0
-
SHA256
1024b5fa915768f1b8d83eea9be01dcd664401b8c4732223733f2bc2689c78d5
-
SHA512
423d7656799a96033f336cadcbb70ca52dacd22fe23fb41197105011809e89aaaec9a9f38fa007cf4091debc3c83e54347bd02f8d3ca4d18df39ee48a7823e88
-
SSDEEP
393216:6D7co9AY9qIV0vZas83lfwu9GI7tmbL7aGe1Vsn:6D7coWIPs83lfDGXraG2Vsn
Static task
static1
Behavioral task
behavioral1
Sample
PDFCreator-1_7_1_setup [1].exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
PDFCreator-1_7_1_setup [1].exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
PDFCreator-1_7_1_setup [1].exe
-
Size
17.0MB
-
MD5
2b0cbab7d9dbb405421f2397967d021c
-
SHA1
9434866971dd357600c9f2b1e31b7893c3a070f0
-
SHA256
1024b5fa915768f1b8d83eea9be01dcd664401b8c4732223733f2bc2689c78d5
-
SHA512
423d7656799a96033f336cadcbb70ca52dacd22fe23fb41197105011809e89aaaec9a9f38fa007cf4091debc3c83e54347bd02f8d3ca4d18df39ee48a7823e88
-
SSDEEP
393216:6D7co9AY9qIV0vZas83lfwu9GI7tmbL7aGe1Vsn:6D7coWIPs83lfDGXraG2Vsn
Score8/10-
Registers new Print Monitor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1