Analysis
-
max time kernel
150s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
10-10-2022 11:49
Behavioral task
behavioral1
Sample
PPT/Writing_Argument _LYL.pdf
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PPT/Writing_Argument _LYL.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
PPT/Writing_Issue_LYL.pdf
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
PPT/Writing_Issue_LYL.pdf
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
PPT/Writing_Language_LYL.pdf
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
PPT/Writing_Language_LYL.pdf
Resource
win10v2004-20220812-en
General
-
Target
PPT/Writing_Argument _LYL.pdf
-
Size
1.5MB
-
MD5
cde2e40bd13629e21cd633978da1c15a
-
SHA1
03c4a076e03378c70f90a47643ffee1e1a1280e2
-
SHA256
c9c6e576aad75dbb8b815593e54b3e587ddf8cb06184ab3104c862c5db728599
-
SHA512
81b49de0b7ee7116663b4e222510dba7b0c84349cf70803ab7eb606decbfc532597172aa33ca4234991a34be0d74a153949c6fcdfb07c737002bd99e25db840d
-
SSDEEP
24576:+scKdo0ew6yv9y5pG9UMRk5i7O3mrvMHgu9/RQZLMCfOXSMbhfu:+tQL6yVE4bRk5rmgbQZLM1XSMtfu
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 1668 AcroRd32.exe 1668 AcroRd32.exe 1668 AcroRd32.exe 1668 AcroRd32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1668-54-0x0000000075071000-0x0000000075073000-memory.dmpFilesize
8KB