Overview

overview

3

Static

static

3

証拠/gon...er.pdf

windows7-x64

1

証拠/gon...er.pdf

windows10-2004-x64

1

証拠/gon...er.pdf

windows7-x64

1

証拠/gon...er.pdf

windows10-2004-x64

1

証拠/gon...er.pdf

windows7-x64

1

証拠/gon...er.pdf

windows10-2004-x64

1

証拠/gon...er.pdf

windows7-x64

1

証拠/gon...er.pdf

windows10-2004-x64

1

証拠/mor...��.pdf

windows7-x64

1

証拠/mor...��.pdf

windows10-2004-x64

1

証拠/mor...er.pdf

windows7-x64

1

証拠/mor...er.pdf

windows10-2004-x64

1

証拠/mor...er.pdf

windows7-x64

1

証拠/mor...er.pdf

windows10-2004-x64

1

証拠/mor...��.pdf

windows7-x64

1

証拠/mor...��.pdf

windows10-2004-x64

1

証拠/mor...er.pdf

windows7-x64

1

証拠/mor...er.pdf

windows10-2004-x64

1

証拠/mor...er.pdf

windows7-x64

1

証拠/mor...er.pdf

windows10-2004-x64

1

証拠/mor...er.pdf

windows7-x64

1

証拠/mor...er.pdf

windows10-2004-x64

1

証拠/mor...��.pdf

windows7-x64

1

証拠/mor...��.pdf

windows10-2004-x64

1

証拠/mor...er.pdf

windows7-x64

1

証拠/mor...er.pdf

windows10-2004-x64

1

証拠/mor...er.pdf

windows7-x64

1

証拠/mor...er.pdf

windows10-2004-x64

1

証拠/mor...er.pdf

windows7-x64

1

証拠/mor...er.pdf

windows10-2004-x64

1

証拠/mor...er.pdf

windows7-x64

1

証拠/mor...er.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    26-10-2022 16:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    証拠/gontamorin/もるごんさんはTwitterを使っています_ 「こいつ頭悪すぎ」 _ Twitter.pdf

  • Size

    317KB

  • MD5

    3d6ba6a47675f937d3201107de7562aa

  • SHA1

    d201fdf1d605de699101eef8ab906be61f1b0a25

  • SHA256

    659eda2ae57ec5e97ce93044c0d3371af4b22de87775d3397ee376707e3538c7

  • SHA512

    c65596bf5233ae6bf1f3c9721f789b70b183dda572ca78743809bc2e61feda3fa01770e5494c179fd0e290d601425602d90d60b047fe85078a2ecfe3f58f84ea

  • SSDEEP

    6144:+Km4akupznqT+7v5U9kclOk4+7Je18Jxbq:+Kgk+jE+75U2EOk4+7EaJxbq

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\証拠\gontamorin\もるごんさんはTwitterを使っています_ 「こいつ頭悪すぎ」 _ Twitter.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1552-54-0x0000000075241000-0x0000000075243000-memory.dmp
    Filesize

    8KB

    Download