Analysis

  • max time kernel
    150s
  • max time network
    43s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    17-10-2022 17:18

General

  • Target

    Five Strategies for a Smooth Transition to BMC Helix.pdf

  • Size

    16.4MB

  • MD5

    dfa3dd7c9d881726327d78841c4d8927

  • SHA1

    16fe277dff8c07a588e86b8511fd95a07f5f25fa

  • SHA256

    7adc7d8c7189ad1be10dd0ad0ad353e852440de17d15f3caf1e428e86fc872d1

  • SHA512

    193aae8b675ae86916885697628ee810be07b69314372b8799e70431df9a6f390b1941031d6e24456d08e986b9c2909d25c2cc974204a2305960484354c6eb26

  • SSDEEP

    393216:IPEkasCLFVJRaZU/yRbtMg/GS9PldDqctA7NAuSgrDfg8Du3Zjhln:Ke7faZZntPnGctwBZrDfqZrn

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Five Strategies for a Smooth Transition to BMC Helix.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1504-54-0x00000000768A1000-0x00000000768A3000-memory.dmp
    Filesize

    8KB