Overview
overview
3Static
static
3PDF Embedd...ML.pdf
windows7_x64
1PDF Embedd...ML.pdf
windows10-2004_x64
1HTML Javas...d.html
windows7_x64
1HTML Javas...d.html
windows10-2004_x64
1PDF Javasc...er.pdf
windows7_x64
1PDF Javasc...er.pdf
windows10-2004_x64
1PDF Javascript.pdf
windows7_x64
1PDF Javascript.pdf
windows10-2004_x64
1PDF Launch calc.pdf
windows7_x64
1PDF Launch calc.pdf
windows10-2004_x64
1Analysis
-
max time kernel
31s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220331-en -
submitted
14-04-2022 13:56
Behavioral task
behavioral1
Sample
PDF EmbeddedFile HTML.pdf
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
PDF EmbeddedFile HTML.pdf
Resource
win10v2004-20220331-en
Behavioral task
behavioral3
Sample
HTML Javascript obfuscated.html
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
HTML Javascript obfuscated.html
Resource
win10v2004-20220331-en
Behavioral task
behavioral5
Sample
PDF Javascript trigger.pdf
Resource
win7-20220310-en
Behavioral task
behavioral6
Sample
PDF Javascript trigger.pdf
Resource
win10v2004-20220331-en
Behavioral task
behavioral7
Sample
PDF Javascript.pdf
Resource
win7-20220331-en
Behavioral task
behavioral8
Sample
PDF Javascript.pdf
Resource
win10v2004-20220331-en
Behavioral task
behavioral9
Sample
PDF Launch calc.pdf
Resource
win7-20220331-en
Behavioral task
behavioral10
Sample
PDF Launch calc.pdf
Resource
win10v2004-20220331-en
General
-
Target
PDF Launch calc.pdf
-
Size
1KB
-
MD5
d05cb242612561d44fcf09330c76952b
-
SHA1
75370fe6e2e86cba426f0f9b6f0799acde5683f3
-
SHA256
e30b416fcc99b731860770fea212e59a68ea6a2df9c1bc8ede93305f13ad5eeb
-
SHA512
f9bb68d963b0e095bba1e492f608f28657ccae2bcbe88c467de3db4443b6a4435739528aa8ae47885c397634f58763a73b3da8d4c2f03854ffb051df970ca460
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1912 AcroRd32.exe 1912 AcroRd32.exe 1912 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1912-54-0x0000000076991000-0x0000000076993000-memory.dmpFilesize
8KB