Analysis

  • max time kernel
    28s
  • max time network
    76s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    21/01/2022, 10:43

General

  • Target
    PL FT220122L.pdf.exe
  • Size 699KB
  • Sample220121-mr866afcf9
  • SHA256 4f932ea60ac54baa3d8a26705d2ba0013b6728576055457e301ffe96efd082c2
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\PL FT220122L.pdf.exe
    "C:\Users\Admin\AppData\Local\Temp\PL FT220122L.pdf.exe"
    1⤵
      PID:332
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
      1⤵
        PID:744

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            memory/332-130-0x0000000000230000-0x00000000002E6000-memory.dmp

            memory/332-131-0x0000000005330000-0x00000000058D4000-memory.dmp

            memory/332-132-0x0000000004C90000-0x0000000004D22000-memory.dmp

            memory/332-133-0x0000000004D80000-0x0000000005324000-memory.dmp

            memory/332-134-0x0000000004C80000-0x0000000004C8A000-memory.dmp

            memory/332-135-0x0000000007390000-0x000000000742C000-memory.dmp