1fc4cfdc4a304464d33ff5c224bb8f497ac68928bd8cac90d4ab581cf90fa8bc

Submit
Reports

Overview

overview

Static

static

証拠/gon...er.pdf

windows7-x64

証拠/gon...er.pdf

windows10-2004-x64

証拠/gon...er.pdf

windows7-x64

証拠/gon...er.pdf

windows10-2004-x64

証拠/gon...er.pdf

windows7-x64

証拠/gon...er.pdf

windows10-2004-x64

証拠/gon...er.pdf

windows7-x64

証拠/gon...er.pdf

windows10-2004-x64

証拠/mor...��.pdf

windows7-x64

証拠/mor...��.pdf

windows10-2004-x64

証拠/mor...er.pdf

windows7-x64

証拠/mor...er.pdf

windows10-2004-x64

証拠/mor...er.pdf

windows7-x64

証拠/mor...er.pdf

windows10-2004-x64

証拠/mor...��.pdf

windows7-x64

証拠/mor...��.pdf

windows10-2004-x64

証拠/mor...er.pdf

windows7-x64

証拠/mor...er.pdf

windows10-2004-x64

証拠/mor...er.pdf

windows7-x64

証拠/mor...er.pdf

windows10-2004-x64

証拠/mor...er.pdf

windows7-x64

証拠/mor...er.pdf

windows10-2004-x64

証拠/mor...��.pdf

windows7-x64

証拠/mor...��.pdf

windows10-2004-x64

証拠/mor...er.pdf

windows7-x64

証拠/mor...er.pdf

windows10-2004-x64

証拠/mor...er.pdf

windows7-x64

証拠/mor...er.pdf

windows10-2004-x64

証拠/mor...er.pdf

windows7-x64

証拠/mor...er.pdf

windows10-2004-x64

証拠/mor...er.pdf

windows7-x64

証拠/mor...er.pdf

windows10-2004-x64

Analysis

max time kernel
152s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
26-10-2022 16:50

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

1 signatures

Behavioral task

behavioral1

Sample

証拠/gontamorin/もるごん (@gontamorin) _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

証拠/gontamorin/もるごん (@gontamorin) _ Twitter.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

証拠/gontamorin/もるごんさんはTwitterを使っています_ 「こいつ頭悪すぎ」 _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

証拠/gontamorin/もるごんさんはTwitterを使っています_ 「こいつ頭悪すぎ」 _ Twitter.pdf

Resource

win10v2004-20220901-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral5

Sample

証拠/gontamorin/もるごんさんはTwitterを使っています_ 「こいつ頭悪すぎだろ」 _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

証拠/gontamorin/もるごんさんはTwitterを使っています_ 「こいつ頭悪すぎだろ」 _ Twitter.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral7

Sample

証拠/gontamorin/もるごんさんはTwitterを使っています_ 「無能発見」 _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

証拠/gontamorin/もるごんさんはTwitterを使っています_ 「無能発見」 _ Twitter.pdf

Resource

win10v2004-20220901-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral9

Sample

証拠/morigoooo2/ごんもり on Twitter_ _いやこいつ普通見たら予想つくだろ。頭��.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

証拠/morigoooo2/ごんもり on Twitter_ _いやこいつ普通見たら予想つくだろ。頭��.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral11

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こいつガイジだわ。_ _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こいつガイジだわ。_ _ Twitter.pdf

Resource

win10v2004-20220901-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral13

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こいつサイコパスやん_ _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こいつサイコパスやん_ _ Twitter.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral15

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こいつ結局野球見たいだけやん。人間と�.pdf

Resource

win7-20220901-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こいつ結局野球見たいだけやん。人間と�.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こいつ頭悪そうやなwww_ _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こいつ頭悪そうやなwww_ _ Twitter.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral19

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こういう奴がいつか人とか轢くんだろうな〜_ _ Twitter.pdf

Resource

win7-20220901-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こういう奴がいつか人とか轢くんだろうな〜_ _ Twitter.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral21

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こういう奴が犯罪犯すんだよな〜_ _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

証拠/morigoooo2/ごんもり on Twitter_ _こういう奴が犯罪犯すんだよな〜_ _ Twitter.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral23

Sample

証拠/morigoooo2/ごんもり on Twitter_ _すぐ離婚する奴って人間性に問題がある��.pdf

Resource

win7-20220901-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

証拠/morigoooo2/ごんもり on Twitter_ _すぐ離婚する奴って人間性に問題がある��.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral25

Sample

証拠/morigoooo2/ごんもり on Twitter_ _ほんまに雑魚やな https___t.co_NruQ9p4L2U_ _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

証拠/morigoooo2/ごんもり on Twitter_ _ほんまに雑魚やな https___t.co_NruQ9p4L2U_ _ Twitter.pdf

Resource

win10v2004-20220901-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral27

Sample

証拠/morigoooo2/ごんもり on Twitter_ _また被害妄想ですか......_ _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

証拠/morigoooo2/ごんもり on Twitter_ _また被害妄想ですか......_ _ Twitter.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral29

Sample

証拠/morigoooo2/ごんもり on Twitter_ _やったぜ_ _ Twitter.pdf

Resource

win7-20220901-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

証拠/morigoooo2/ごんもり on Twitter_ _やったぜ_ _ Twitter.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral31

Sample

証拠/morigoooo2/ごんもり on Twitter_ _リプ制限のクソ野郎_ _ Twitter.pdf

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

証拠/morigoooo2/ごんもり on Twitter_ _リプ制限のクソ野郎_ _ Twitter.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Report Analysis Logs

General

Target

証拠/morigoooo2/ごんもり on Twitter_ _こいつ結局野球見たいだけやん。人間と�.pdf
Size

325KB
MD5

a11315396e96b09618d14cc1968151e8
SHA1

7babafc12cf06797c72aa878f7b62d35a0754cb6
SHA256

62f7f1582eb543493838c937526a33c3c8bb38d31c6247badf6091c99dd0dfdb
SHA512

88d048b9dae782b6b2344555efcb34dae0cc3345eb6a1570e8b26e0e79532f639d3211c7afdbaafbea189af9f1b920c3de7e4af627df108f21a7665823fdce78
SSDEEP

6144:pfeALanpQbt31PxbGZIoGJfzCbgVfMPLF9V4DK:pf5OpCt31PIiZ7CuQBuK

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1456 AcroRd32.exe
1456 AcroRd32.exe
1456 AcroRd32.exe
1456 AcroRd32.exe

pid	process
1456	AcroRd32.exe
1456	AcroRd32.exe
1456	AcroRd32.exe
1456	AcroRd32.exe

Processes

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\証拠\morigoooo2\ごんもり on Twitter_ _こいつ結局野球見たいだけやん。人間と�.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1456-54-0x0000000074B51000-0x0000000074B53000-memory.dmp

Filesize
8KB

Download