Overview

overview

10

Static

static

10

78769e4085...7e.zip

windows7_x64

1

78769e4085...7e.zip

windows10-2004_x64

malware-an...er.pdf

windows7_x64

1

malware-an...er.pdf

windows10-2004_x64

1

malware-an...is.pdf

windows7_x64

1

malware-an...is.pdf

windows10-2004_x64

1

malware-an...ypt.py

linux_amd64

malware-an...ypt.py

linux_armhf

malware-an...ypt.py

linux_mips

malware-an...ypt.py

linux_mipsel

malware-an...ons.py

windows7_x64

3

malware-an...ons.py

windows10-2004_x64

3

malware-an...is.pdf

windows7_x64

1

malware-an...is.pdf

windows10-2004_x64

malware-an...tt.ps1

windows7_x64

10

malware-an...tt.ps1

windows10-2004_x64

8

malware-an...tt.vbs

windows7_x64

malware-an...tt.vbs

windows10-2004_x64

7

malware-an...er.ps1

windows7_x64

1

malware-an...er.ps1

windows10-2004_x64

malware-an...od.ps1

windows7_x64

malware-an...od.ps1

windows10-2004_x64

10

malware-an...44.exe

windows7_x64

10

malware-an...44.exe

windows10-2004_x64

malware-an...55.dll

windows7_x64

1

malware-an...55.dll

windows10-2004_x64

malware-an...xes.py

linux_amd64

malware-an...xes.py

linux_armhf

malware-an...xes.py

linux_mips

malware-an...xes.py

linux_mipsel

malware-an...dra.py

windows7_x64

malware-an...dra.py

windows10-2004_x64

3

Analysis

  • max time kernel
    152s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    21-05-2022 11:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    malware-analysis-writeups-master/bashar-bachir-chain/bashar-bachir-analysis.pdf

  • Size

    1.2MB

  • MD5

    c53186df717d8037ff5edb0fc9736dda

  • SHA1

    510cf2f79270303ca5a18474ca541d0ecb20c599

  • SHA256

    e0d7fadbfdc8eaad4071e6d99698f460f9eae7ddd1b27e2d21028dbd10fa0d5a

  • SHA512

    4a3b8fd9d1fe648373b1f3b90e53b726c62da083feb6e70345dcd8386c04b77e85a12367e74278467e092e4a5b30f9c8c5f7174f7a83de72d951db36b763eb10

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\malware-analysis-writeups-master\bashar-bachir-chain\bashar-bachir-analysis.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1092-54-0x00000000765C1000-0x00000000765C3000-memory.dmp
    Filesize

    8KB

    Download