Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2024, 00:27

General

  • Target

    Burst Royale 0.9/Engine/CompareTamplateFile/summary Legend.pdf

  • Size

    8KB

  • MD5

    cf7573604f9c1594ae61f860ac3f2c95

  • SHA1

    e6eccdd13c41232377d21bc471c161bf6ec3505a

  • SHA256

    0c50a31f3b69ce9a52a681254c209fa43ad66745198c835ee80b132922344522

  • SHA512

    6581ee1f537c912678182520c9081c3c75d04518f79da39b910f6d4726d38e9f7a5965ed26989c90c36a0b55ddb76d3662f1b3c51912a65d0473bbfe66a4513b

  • SSDEEP

    192:bTJRTGocctDiuQFiiF0FoF8k0YGPq7gVpr:bTJRTGoccBiuQFiiF0FoFP0YGi7+pr

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Burst Royale 0.9\Engine\CompareTamplateFile\summary Legend.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2160

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5390f6a176471a1b73cb3c06df5b954a

    SHA1

    40f397d0f5c688087500c60c06232ac8adb617d9

    SHA256

    f5f9b8064745b2f99e33f1c01c9904cda160c870b1a92aca294881a475267026

    SHA512

    81ee3efcf08f710af343d3f933ded658fba853b828389578b10bc7d3a36d020002c213924559487e170e8fc49b0eebedce7759068a0280f6cf7fb3ba02676931