Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
1东明县�...��.doc
windows7-x64
4东明县�...��.doc
windows10-2004-x64
1东明县�...��.doc
windows7-x64
4东明县�...��.doc
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...��.pdf
windows7-x64
1北王图�...��.pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...3).pdf
windows7-x64
1北王图�...3).pdf
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...3).pdf
windows7-x64
1北王图�...3).pdf
windows10-2004-x64
1北王图�...4).pdf
windows7-x64
1北王图�...4).pdf
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1北王图�...2).pdf
windows7-x64
1北王图�...2).pdf
windows10-2004-x64
1北王图�...1).pdf
windows7-x64
1北王图�...1).pdf
windows10-2004-x64
1Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
07/05/2024, 09:51
Static task
static1
Behavioral task
behavioral1
Sample
东明县菜园集镇北王庄等9个村土地整治项目二招标文件.doc
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
东明县菜园集镇北王庄等9个村土地整治项目二招标文件.doc
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
东明县菜园集镇北王等9个村土地治理项目二招标公告.doc
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
东明县菜园集镇北王等9个村土地治理项目二招标公告.doc
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
北王图纸/0土方-东坑 Model (1).pdf
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
北王图纸/0土方-东坑 Model (1).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral7
Sample
北王图纸/0土方-东坑 Model (2).pdf
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
北王图纸/0土方-东坑 Model (2).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral9
Sample
北王图纸/1-1机井(80m) Model (1)-北王庄.pdf
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
北王图纸/1-1机井(80m) Model (1)-北王庄.pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
北王图纸/1-1机井(80m) Model (2).pdf
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
北王图纸/1-1机井(80m) Model (2).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral13
Sample
北王图纸/1-1机井(80m) Model (3).pdf
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
北王图纸/1-1机井(80m) Model (3).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral15
Sample
北王图纸/2-2、农沟清淤1断面图 Model (1).pdf
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
北王图纸/2-2、农沟清淤1断面图 Model (1).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral17
Sample
北王图纸/2-2、农沟清淤1断面图 Model (2).pdf
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
北王图纸/2-2、农沟清淤1断面图 Model (2).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral19
Sample
北王图纸/2-2、农沟清淤1断面图 Model (3).pdf
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
北王图纸/2-2、农沟清淤1断面图 Model (3).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral21
Sample
北王图纸/2-2、农沟清淤2横截面 Model (4).pdf
Resource
win7-20240419-en
Behavioral task
behavioral22
Sample
北王图纸/2-2、农沟清淤2横截面 Model (4).pdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
北王图纸/3-1、板桥-8m Model (1).pdf
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
北王图纸/3-1、板桥-8m Model (1).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral25
Sample
北王图纸/3-1、板桥-8m Model (2).pdf
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
北王图纸/3-1、板桥-8m Model (2).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral27
Sample
北王图纸/3-2、板桥-14m Model (1).pdf
Resource
win7-20240215-en
Behavioral task
behavioral28
Sample
北王图纸/3-2、板桥-14m Model (1).pdf
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
北王图纸/3-2、板桥-14m Model (2).pdf
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
北王图纸/3-2、板桥-14m Model (2).pdf
Resource
win10v2004-20240419-en
Behavioral task
behavioral31
Sample
北王图纸/4-3、1-2-3型涵管 Model (1).pdf
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
北王图纸/4-3、1-2-3型涵管 Model (1).pdf
Resource
win10v2004-20240419-en
General
-
Target
北王图纸/1-1机井(80m) Model (1)-北王庄.pdf
-
Size
376KB
-
MD5
7cc40258e466fefe4e769602b8ebb1ae
-
SHA1
bfa09240404a0edc565985bc5f55f9cd5ff3ab61
-
SHA256
1d09f17451fe7800ee12206de33590d6cc45591aa5abb5090da15b36f3738ae7
-
SHA512
14eb1e8510ef88615b503eb7389e87d7e5f776b42e1ae8e88483cae515adb7e16521d80e8d3554cb8cebfe38940e8218d66bb8d234758828d33078ffb3f892bb
-
SSDEEP
6144:+HKl9ascdw5BWWw3D+NwT2nvuijUx8Im5NEUqjlLRlDSC9T7IeiQVE72hbStHGxD:+cgsAw5hID+NuPwUxQ5iVXSChPiQVE1a
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1320 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1320 AcroRd32.exe 1320 AcroRd32.exe 1320 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53f977217e0d2c7c28523ff2d3adfa732
SHA16198a1da21c12958997954dd7cb7ddbc097d93b1
SHA256f8e6bd3d189744d496e1f973e9ac5edba25fd82bf88ec6136810053d5c21e22d
SHA512955dedc89c639af6a7ad1a6ba282ce5ac257613c21d5c60eb05c90360a2891f36811c2a75b2f52dd530219ef4f1f6528e8cfbe0067d40c106cf73311c63aa6ef