Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
PicoPDFEditingSoftware.exe
-
Size
1.5MB
-
Sample
240516-trpwvach4z
-
MD5
f6b95936cb7486dd5ca43c63c8ad36c6
-
SHA1
a488faf5fa1c773b58988276ee61b0e9aa6dab24
-
SHA256
9dc90f1f05edddba503a8df4c41f5b3c664d840d3b9097c4393f3bb939ea65bf
-
SHA512
ceaf3738892d4e552fef0833c212c9e500ac026a15834a32ba741e4978158476c70f8e60a796075447b2da99509066fb283b68d27847aa533b2803254d63e85b
-
SSDEEP
49152:5YyCar5yHxc9AXOgoLCrkMszdwMOL0fOt79drZ01:qLaERc7ghpsBzOLL79Y
Static task
static1
Behavioral task
behavioral1
Sample
PicoPDFEditingSoftware.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
PicoPDFEditingSoftware.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
PicoPDFEditingSoftware.exe
-
Size
1.5MB
-
MD5
f6b95936cb7486dd5ca43c63c8ad36c6
-
SHA1
a488faf5fa1c773b58988276ee61b0e9aa6dab24
-
SHA256
9dc90f1f05edddba503a8df4c41f5b3c664d840d3b9097c4393f3bb939ea65bf
-
SHA512
ceaf3738892d4e552fef0833c212c9e500ac026a15834a32ba741e4978158476c70f8e60a796075447b2da99509066fb283b68d27847aa533b2803254d63e85b
-
SSDEEP
49152:5YyCar5yHxc9AXOgoLCrkMszdwMOL0fOt79drZ01:qLaERc7ghpsBzOLL79Y
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-