Analysis

  • max time kernel
    150s
  • max time network
    42s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    16-09-2022 11:22

General

  • Target

    449560b97353fd410ef7c640a0be82a2867e79b016da00262b83950e3bcacae2.pdf

  • Size

    522KB

  • MD5

    5d3beda3d16d12666786b33bcec1d6f2

  • SHA1

    12f09a43e32eb3ce6cd4807f98aeaf78e571556f

  • SHA256

    449560b97353fd410ef7c640a0be82a2867e79b016da00262b83950e3bcacae2

  • SHA512

    cf679fbd3152342fbd588fbdcdb1e8071c250f95b60e3a8653822ab4356317fcdd31d91d2fc981e4d5ef11173b534897ff8e2ed889092dae3e4f4c5f9720a012

  • SSDEEP

    12288:f1qEkbDOZCItmswU/jE+LEgXJuNXCDnTt/u:tqEWIs3+L9sEE

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\449560b97353fd410ef7c640a0be82a2867e79b016da00262b83950e3bcacae2.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1708-54-0x0000000075451000-0x0000000075453000-memory.dmp

    Filesize

    8KB

  • memory/1708-55-0x0000000000C60000-0x0000000000CD6000-memory.dmp

    Filesize

    472KB