Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

OSbot judi...ve.pdf

windows7-x64

1

OSbot judi...ve.pdf

windows10-2004-x64

1

OSbot judi...rd.pdf

windows7-x64

1

OSbot judi...rd.pdf

windows10-2004-x64

1

OSbot judi...nd.pdf

windows7-x64

1

OSbot judi...nd.pdf

windows10-2004-x64

1

OSbot judi...lp.pdf

windows7-x64

1

OSbot judi...lp.pdf

windows10-2004-x64

1

OSbot judi...me.pdf

windows7-x64

1

OSbot judi...me.pdf

windows10-2004-x64

1

OSbot judi...ib.pdf

windows7-x64

1

OSbot judi...ib.pdf

windows10-2004-x64

1

OSbot judi...ve.pdf

windows7-x64

1

OSbot judi...ve.pdf

windows10-2004-x64

1

OSbot judi...ns.pdf

windows7-x64

1

OSbot judi...ns.pdf

windows10-2004-x64

1

OSbot judi...ts.pdf

windows7-x64

1

OSbot judi...ts.pdf

windows10-2004-x64

1

OSbot judi...ct.pdf

windows7-x64

1

OSbot judi...ct.pdf

windows10-2004-x64

1

OSbot judi...t__.py

windows7-x64

3

OSbot judi...t__.py

windows10-2004-x64

3

OSbot judi...10.pyc

windows7-x64

3

OSbot judi...10.pyc

windows10-2004-x64

3

OSbot judi...10.pyc

windows7-x64

3

OSbot judi...10.pyc

windows10-2004-x64

3

OSbot judi...10.pyc

windows7-x64

3

OSbot judi...10.pyc

windows10-2004-x64

3

OSbot judi...bot.py

windows7-x64

3

OSbot judi...bot.py

windows10-2004-x64

3

OSbot judi...t__.py

windows7-x64

3

OSbot judi...t__.py

windows10-2004-x64

3

Resubmissions

03/05/2024, 18:40

240503-xa7xwagb26 10

03/05/2024, 18:19

240503-wynngach5t 10

03/05/2024, 15:38

240503-s26fxaad2t 10

Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 18:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    OSbot judicable/_internal/matplotlib/mpl-data/images/help.pdf

  • Size

    1KB

  • MD5

    a0c9d1a063e353351fa07e26f0189ccf

  • SHA1

    e738f15e582f387119767435e5b4a57ba779129b

  • SHA256

    09e13defc20c8b4616ce758a8c84f547c22b3f82a16744bbbac3d4beb79281c0

  • SHA512

    7c4f5967c85d0c075916c20e74baf0e1d3e5583be143b146aaff56c505cf028e160c7e20e2ff9a6ecd095a450ce3de821461207db7221445f9f0d570326b0639

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\OSbot judicable\_internal\matplotlib\mpl-data\images\help.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    be4cbb69832999156abe153b587b2bbf

    SHA1

    1d4aa252b75e5ba7142a73b652537754b1700cf0

    SHA256

    bc98a6f5d2f7b9e24e029983a54d303164af3d707a95ae467b61fb56b03d3602

    SHA512

    ea2d615f1ad2fd0ee6b5a6a409ee6e2b150d2e0f8aad5e3d81e8b1816edde413f24b1ccc3b215f088fc46613d8ce67228008600568a7df5449db5315cb778acb

    Download Submit