Analysis

  • max time kernel
    157s
  • max time network
    354s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2022, 09:09

General

  • Target

    RPG.Maker.MZ.v1.0.1/dlc/3D Particle Effect Pack/3Dパーティクルエフェクト素材集_はじ�.pdf

  • Size

    374KB

  • MD5

    dd8fa3a84969892ebf36e0561b818fa5

  • SHA1

    4b7cf922a6f940027f997379aa875346c6d18ce5

  • SHA256

    18a2881f7ad026bbf6dba8654b7bf6a9daa93b496225c4099279501b09bc5f5a

  • SHA512

    f220159daf6a0a7b38c48788dc06083433a33bb3709532d8caa7c6216cb95207443e6d8ff8c472d89d57a3d62e9e177f4381db74b854a2c2b132a597d72b9691

  • SSDEEP

    6144:YXBY/SXpOqCeRL9xgyKXOdbBpqsw5hr13/w1q3n1n6iERK:biMK9xgOdbLbEhr1Pn31h1

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\RPG.Maker.MZ.v1.0.1\dlc\3D Particle Effect Pack\3Dパーティクルエフェクト素材集_はじ�.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1492-54-0x0000000075521000-0x0000000075523000-memory.dmp

    Filesize

    8KB