Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
32s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
18/05/2023, 15:03
Behavioral task
behavioral1
Sample
Brokers should prioritise critical cloud security following largest ever DDoS attack.pdf
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Brokers should prioritise critical cloud security following largest ever DDoS attack.pdf
Resource
win10v2004-20230220-en
General
-
Target
Brokers should prioritise critical cloud security following largest ever DDoS attack.pdf
-
Size
140KB
-
MD5
cde0973cd3e457e3d25a0b13312772ac
-
SHA1
57d68a82d78599b09eb013784760e852cff9eb85
-
SHA256
041e760ac4ab50f7c9f64223987e6c17616043d5c652f977806ba25c803f9fc7
-
SHA512
39c0fadd0fe5a39c85c88eb347d1a0018676160ecf60a79efda5529452dc6325c4bced6456d754a5894e7d8e1bde28adea20cac4a320708a71c37a5d6ba2ac62
-
SSDEEP
3072:N6jUSjjOHOEF0LomVVxeQMPrPbgw8u6p8el+zA:EFEqP6muQ
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1512 AcroRd32.exe 1512 AcroRd32.exe 1512 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Brokers should prioritise critical cloud security following largest ever DDoS attack.pdf"1⤵
- Suspicious use of SetWindowsHookEx
PID:1512