Resubmissions

08-10-2022 00:17

221008-alen5seafl 10

07-10-2022 06:08

221007-gv6mjsbhhn 10

Analysis

  • max time kernel
    151s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    07-10-2022 06:08

General

  • Target

    PKSJ Malware/2/VirusShare_480ef02bb062a57724e1b3e14532a140.pdf

  • Size

    32KB

  • MD5

    480ef02bb062a57724e1b3e14532a140

  • SHA1

    5ea2c3fdeb0b399e1805a94d8e6af4ce0de2c63e

  • SHA256

    b2e302356d613a814a41d356a61cee24fc133dd032e4b02d8e29436aedd8d742

  • SHA512

    82587a541bdc570b15402ef33beb14d9681160dc6e520f0c34b3c040658d17a9ced58feaa350f3a6c56eb7236ceb4bd09ba6ece56d13113780a6fe1a5044a99f

  • SSDEEP

    768:9EKOUP0/RXtY+E1dhX2e1kaVsVri7sF9/I70u5M/E5vXuMZmwgCLWarCC:ROc0JTE1dhX2e1kssVri7sng0u5MyXFh

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PKSJ Malware\2\VirusShare_480ef02bb062a57724e1b3e14532a140.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1968-54-0x0000000075141000-0x0000000075143000-memory.dmp
    Filesize

    8KB