132537de0b8352e6a8fd06e8daaba526cadc21ec1b5cd65f5c3bb269aa51981a

General

Target

gzcizt.mex63 abph63 fl.swskz63 f.hris63 .ljgku63 fcrl63 w.wjmxpfu63 eu.rahah63 x.cysm63 lcgg.xk63 tiyweflr63 .um.pdf
Size

193KB
MD5

3139f85661d7e09d51dafd9b676a62d3
SHA1

3da301f5a38dd95b0d30c89a55455d13ea29c6e2
SHA256

132537de0b8352e6a8fd06e8daaba526cadc21ec1b5cd65f5c3bb269aa51981a
SHA512

7d9ce67207330de5f36a85065760b4db5a2ff009b12271ff274951098b9bfd4be7c4732db58413503b963064c7cccf5e29ba263cb7fe8cb8247d199ed53a3fa3

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

AcroRd32.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	AcroRd32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	AcroRd32.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

Processes:

AcroRd32.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-941723256-3451054534-3089625102-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	AcroRd32.exe

Suspicious behavior: EnumeratesProcesses 18 IoCs

Processes:

AcroRd32.exe

pid	process
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe
480	AcroRd32.exe

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

AcroRd32.exe

pid process

480 AcroRd32.exe
Suspicious use of SetWindowsHookEx 6 IoCs

Processes:

AcroRd32.exe

pid process

480 AcroRd32.exe
480 AcroRd32.exe
480 AcroRd32.exe
480 AcroRd32.exe
480 AcroRd32.exe
480 AcroRd32.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

AcroRd32.exeRdrCEF.exe

description	pid	process	target process
PID 480 wrote to memory of 1012	480	AcroRd32.exe	RdrCEF.exe
PID 480 wrote to memory of 1012	480	AcroRd32.exe	RdrCEF.exe
PID 480 wrote to memory of 1012	480	AcroRd32.exe	RdrCEF.exe
PID 480 wrote to memory of 1032	480	AcroRd32.exe	RdrCEF.exe
PID 480 wrote to memory of 1032	480	AcroRd32.exe	RdrCEF.exe
PID 480 wrote to memory of 1032	480	AcroRd32.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 1784	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe
PID 1012 wrote to memory of 672	1012	RdrCEF.exe	RdrCEF.exe

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\gzcizt.mex63 abph63 fl.swskz63 f.hris63 .ljgku63 fcrl63 w.wjmxpfu63 eu.rahah63 x.cysm63 lcgg.xk63 tiyweflr63 .um.pdf"
1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:480

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
2⤵
- Suspicious use of WriteProcessMemory
PID:1012

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=AC53E650343C7BD026CB23437E4906EB --mojo-platform-channel-handle=1628 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
3⤵
PID:1784

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=6D152DCA36874075DEE4891BAEE031F7 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=6D152DCA36874075DEE4891BAEE031F7 --renderer-client-id=2 --mojo-platform-channel-handle=1640 --allow-no-sandbox-job /prefetch:1
3⤵
PID:672

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=C2678B82209FB75A2A6C0649C2540BEB --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=C2678B82209FB75A2A6C0649C2540BEB --renderer-client-id=4 --mojo-platform-channel-handle=2072 --allow-no-sandbox-job /prefetch:1
3⤵
PID:1772

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=B09D33978FB4BAACCB9658A87102F08F --mojo-platform-channel-handle=2484 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
3⤵
PID:2956

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=0B82AD32647CA141CF021484CD0E5496 --mojo-platform-channel-handle=1632 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
3⤵
PID:2100

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=49934A2CD2BBF99EDA2C5232CC02B0A2 --mojo-platform-channel-handle=2488 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
3⤵
PID:3524

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
2⤵
PID:1032

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/672-126-0x0000000000E50000-0x0000000000E51000-memory.dmp

Filesize
4KB

Download
memory/672-121-0x0000000077932000-0x0000000077933000-memory.dmp

Filesize
4KB

Download
memory/672-122-0x0000000000E32000-0x0000000000E33000-memory.dmp

Filesize
4KB

Download
memory/672-123-0x0000000000000000-mapping.dmp

Download
memory/672-125-0x0000000000A80000-0x0000000000A81000-memory.dmp

Filesize
4KB

Download
memory/1012-115-0x0000000000000000-mapping.dmp

Download
memory/1032-116-0x0000000000000000-mapping.dmp

Download
memory/1772-129-0x0000000000000000-mapping.dmp

Download
memory/1772-128-0x0000000000B9E000-0x0000000000B9F000-memory.dmp

Filesize
4KB

Download
memory/1772-127-0x0000000077932000-0x0000000077933000-memory.dmp

Filesize
4KB

Download
memory/1784-119-0x0000000000000000-mapping.dmp

Download
memory/1784-117-0x0000000077932000-0x0000000077933000-memory.dmp

Filesize
4KB

Download
memory/1784-118-0x0000000000E35000-0x0000000000E36000-memory.dmp

Filesize
4KB

Download
memory/1784-120-0x0000000000A60000-0x0000000000A61000-memory.dmp

Filesize
4KB

Download
memory/2100-137-0x0000000077932000-0x0000000077933000-memory.dmp

Filesize
4KB

Download
memory/2100-138-0x0000000000F26000-0x0000000000F27000-memory.dmp

Filesize
4KB

Download
memory/2100-139-0x0000000000000000-mapping.dmp

Download
memory/2956-133-0x0000000077932000-0x0000000077933000-memory.dmp

Filesize
4KB

Download
memory/2956-134-0x0000000000E31000-0x0000000000E32000-memory.dmp

Filesize
4KB

Download
memory/2956-135-0x0000000000000000-mapping.dmp

Download
memory/3524-141-0x0000000077932000-0x0000000077933000-memory.dmp

Filesize
4KB

Download
memory/3524-142-0x0000000000D65000-0x0000000000D66000-memory.dmp

Filesize
4KB

Download
memory/3524-143-0x0000000000000000-mapping.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v6

Replay Monitor

Loading Replay Monitor...

Downloads