Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
7SCPDF3/Con...re.dll
windows7-x64
3SCPDF3/Con...re.dll
windows10-2004-x64
3SCPDF3/Con...ak.dll
windows7-x64
3SCPDF3/Con...ak.dll
windows10-2004-x64
3SCPDF3/DocFlt.dll
windows7-x64
3SCPDF3/DocFlt.dll
windows10-2004-x64
3SCPDF3/Int...ib.dll
windows7-x64
1SCPDF3/Int...ib.dll
windows10-2004-x64
1SCPDF3/MFC71LU.dll
windows7-x64
3SCPDF3/MFC71LU.dll
windows10-2004-x64
3SCPDF3/MSLUP71.dll
windows7-x64
3SCPDF3/MSLUP71.dll
windows10-2004-x64
3SCPDF3/MSLUR71.dll
windows7-x64
3SCPDF3/MSLUR71.dll
windows10-2004-x64
3SCPDF3/PdfFlt.dll
windows7-x64
3SCPDF3/PdfFlt.dll
windows10-2004-x64
3SCPDF3/Pri...p2.dll
windows7-x64
3SCPDF3/Pri...p2.dll
windows10-2004-x64
3SCPDF3/RtfFlt.dll
windows7-x64
3SCPDF3/RtfFlt.dll
windows10-2004-x64
3SCPDF3/SCP...or.dll
windows7-x64
3SCPDF3/SCP...or.dll
windows10-2004-x64
3SCPDF3/SCP...or.exe
windows7-x64
3SCPDF3/SCP...or.exe
windows10-2004-x64
3SCPDF3/Sol...DF.dll
windows7-x64
3SCPDF3/Sol...DF.dll
windows10-2004-x64
3SCPDF3/Sol...DF.exe
windows7-x64
3SCPDF3/Sol...DF.exe
windows10-2004-x64
3SCPDF3/SolidCore.dll
windows7-x64
3SCPDF3/SolidCore.dll
windows10-2004-x64
3SCPDF3/SolidHost.exe
windows7-x64
3SCPDF3/SolidHost.exe
windows10-2004-x64
3Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
24/07/2024, 08:09
Behavioral task
behavioral1
Sample
SCPDF3/ConverterCore.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
SCPDF3/ConverterCore.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
SCPDF3/ConverterCore_bak.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
SCPDF3/ConverterCore_bak.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
SCPDF3/DocFlt.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
SCPDF3/DocFlt.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
SCPDF3/Interop.SolidConverterDllLib.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
SCPDF3/Interop.SolidConverterDllLib.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
SCPDF3/MFC71LU.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
SCPDF3/MFC71LU.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
SCPDF3/MSLUP71.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
SCPDF3/MSLUP71.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
SCPDF3/MSLUR71.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
SCPDF3/MSLUR71.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
SCPDF3/PdfFlt.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
SCPDF3/PdfFlt.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
SCPDF3/PrinterSetup2.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
SCPDF3/PrinterSetup2.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
SCPDF3/RtfFlt.dll
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
SCPDF3/RtfFlt.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
SCPDF3/SCPDFCreator.dll
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
SCPDF3/SCPDFCreator.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
SCPDF3/SCPDFCreator.exe
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
SCPDF3/SCPDFCreator.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
SCPDF3/SolidConverterPDF.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
SCPDF3/SolidConverterPDF.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
SCPDF3/SolidConverterPDF.exe
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
SCPDF3/SolidConverterPDF.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
SCPDF3/SolidCore.dll
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
SCPDF3/SolidCore.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
SCPDF3/SolidHost.exe
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
SCPDF3/SolidHost.exe
Resource
win10v2004-20240709-en
General
-
Target
SCPDF3/SolidHost.exe
-
Size
16KB
-
MD5
2c62f35e3f5a70c403d184c1a2ce2c03
-
SHA1
cb4b3fea2dbc99fc12eb83f04039ebe741741510
-
SHA256
1fc240067cbd94384a3384dc30db373da0daf60e68a85a057ef4734d96ab81dc
-
SHA512
3dccfb517056a59804971d65f14089e41226c75430c06d655672baab624a9e0c970107a26d9be7900c0e8e846d0fe59f9280d6f23334bd62c6ea3c7f45c69ac6
-
SSDEEP
96:wvLNbNeK9+wUC6zy1TwSeM/y4/DVbbCyGGK89b99c0ox:cpB6C6zydwSeMq4/JPCyt99A
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SolidHost.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2892 SolidHost.exe