Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
Advance ve...ce.exe
windows7_x64
3Advance ve...ce.exe
windows10-2004_x64
7AvastProxy.exe
windows7_x64
10AvastProxy.exe
windows10-2004_x64
10Report of ...n).pdf
windows7_x64
1Report of ...n).pdf
windows10-2004_x64
1acrord32.dll
windows7_x64
8acrord32.dll
windows10-2004_x64
8wsc.dll
windows7_x64
1wsc.dll
windows10-2004_x64
1Analysis
-
max time kernel
152s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
04/06/2022, 19:33
Static task
static1
Behavioral task
behavioral1
Sample
Advance version of the 2020 Report of the Secretary-General on Peacebuilding and Sustaining Peace.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Advance version of the 2020 Report of the Secretary-General on Peacebuilding and Sustaining Peace.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
AvastProxy.exe
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
AvastProxy.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
Report of the Secretary-General on Peacebuilding and Sustaining Peace (advance version).pdf
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
Report of the Secretary-General on Peacebuilding and Sustaining Peace (advance version).pdf
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
acrord32.dll
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
acrord32.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral9
Sample
wsc.dll
Resource
win7-20220414-en
Behavioral task
behavioral10
Sample
wsc.dll
Resource
win10v2004-20220414-en
General
-
Target
Report of the Secretary-General on Peacebuilding and Sustaining Peace (advance version).pdf
-
Size
936KB
-
MD5
bc5f2edf0f23957e0fbbcd845c744eb2
-
SHA1
b0c167333780626ca8bd6b3b2a9fc54f20a59f34
-
SHA256
54b491541376bda85ffb02b9bb40b9b5adba644f08b630fc1b47392625e1e60a
-
SHA512
84f8c65a02dfd9db2286df405d711595e62ba114c8f911b30561b90818d579879542c4af09950ca8b8c2a9f82186e1cecc25933c17fef7c41e0fbf158d5ee102
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1356 AcroRd32.exe 1356 AcroRd32.exe 1356 AcroRd32.exe 1356 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Report of the Secretary-General on Peacebuilding and Sustaining Peace (advance version).pdf"1⤵
- Suspicious use of SetWindowsHookEx
PID:1356