Analysis
-
max time kernel
150s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
11-09-2022 06:50
Behavioral task
behavioral1
Sample
Cybersecurity – Attack and Defense Strategies Infrastructure security with Red Team and Blue Team.pdf
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Cybersecurity – Attack and Defense Strategies Infrastructure security with Red Team and Blue Team.pdf
Resource
win10v2004-20220812-en
General
-
Target
Cybersecurity – Attack and Defense Strategies Infrastructure security with Red Team and Blue Team.pdf
-
Size
22.8MB
-
MD5
8986f15d3aa123e26b191496591f92f9
-
SHA1
97edf586d2b7b780a591d7406f91438dde39d577
-
SHA256
f1090bd694bb7ef1631c0df0ac9cfa4ef9731df239d9718dfd19400c4fb3a4fb
-
SHA512
4cdb093f8624c61071843238cd2b15dbb8435273a1276988727b0068095ae7113098e968f09c47e346bf2427f33a38936cf0f6894718e4b168dd38d61b5cac11
-
SSDEEP
393216:m31/RR+gs4JteNZF1/7kQI99S5My5qQMmFY0oq8sXVLjnVP/Om263EY7N0CB8AS:m3sH7kQI99SqyUQMYY3slLjV50VAS
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1464 AcroRd32.exe 1464 AcroRd32.exe 1464 AcroRd32.exe 1464 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Cybersecurity – Attack and Defense Strategies Infrastructure security with Red Team and Blue Team.pdf"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1464-54-0x00000000758B1000-0x00000000758B3000-memory.dmpFilesize
8KB