Overview

overview

4

Static

static

4

阿里巴�...��.pdf

windows7-x64

1

阿里巴�...��.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    10-09-2022 16:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    阿里巴巴Java开发手册（华山版）.pdf

  • Size

    1.4MB

  • MD5

    0652435fdfda67e0f250a79c1d4da53a

  • SHA1

    39842519fe1a317190a1faa6ae0930e8eb9508c6

  • SHA256

    1f6b1b38c2d52719b257c888f04463364dfcf2aad2bc8983c7b53732049acd30

  • SHA512

    b35c934cd826282565b2dc2b9490b38c34d0ec3d4bebf59b97c064fed0caf686ea15fea6f5f9fb78fc7305d3d2515d3166e9e46260a9ae8b1fd445a46a402fda

  • SSDEEP

    24576:Q06AuiVt5tfmBzO6pxiw5ZN3kHokdDRkryE7iTUXmClV0z/TOfAzIqK:QlriVtXfmBzXxiw5ZaHBDyryIFXAmjf

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\阿里巴巴Java开发手册（华山版）.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1660-54-0x0000000075FB1000-0x0000000075FB3000-memory.dmp
    Filesize

    8KB

    Download