Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
18/08/2024, 20:47
Behavioral task
behavioral1
Sample
info.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
info.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
padpdf.exe
Resource
win7-20240704-en
General
-
Target
padpdf.exe
-
Size
46KB
-
MD5
e0081f432d5cb068ae8663ec050fdb89
-
SHA1
60e1c991902580839be442f4b4f1d4ff94fb194c
-
SHA256
9094cc1cc580b432bb44bf59ee2db3ad2d8a2ce75db4afe7143a134f8d08b0f2
-
SHA512
899ec04ccebbc8218b5f81e1c89c284eff9691c12700b15701dcde7658a93ef86b995e2ef983d34a8d42fccca2f58fc6454e871e5f86b1c88dac6554d7254a3d
-
SSDEEP
768:yWtD2b7fFU6YLC762TtkhlAyXHxpyG9zLSQWjPAsdtBve7H550yzmHB:rc7fKe7HyXHfyIL0AitBmr6h
Malware Config
Signatures
-
resource yara_rule behavioral4/memory/5008-0-0x0000000000400000-0x0000000000426000-memory.dmp upx behavioral4/memory/5008-1-0x0000000000400000-0x0000000000426000-memory.dmp upx -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language padpdf.exe