Overview

overview

10

Static

static

8969122ef3485d.ps1

windows7-x64

8

8969122ef3485d.ps1

windows10-2004-x64

10

8969122ef3485df.ps1

windows7-x64

8

8969122ef3485df.ps1

windows10-2004-x64

1

PO-12-5-2022.lnk

windows7-x64

8

PO-12-5-2022.lnk

windows10-2004-x64

8

document.pdf

windows7-x64

1

document.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    151s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    05-12-2022 17:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    document.pdf

  • Size

    10KB

  • MD5

    8a7cadbe3c40344007c5334b41f0e8cf

  • SHA1

    fbc916f065157cc5a13f22453c19f7dfecc3c228

  • SHA256

    3902e1734b1d0187d3404dafa4616212342630cb46913242060f485e58201a75

  • SHA512

    8c5e0d7a938ac13537041335d5ea185e83e025b6da138c0c3c49794825e873a52c048b08579711a888bae6e9fedc03996dbb5a2696844bb5335b8f96017dcbdb

  • SSDEEP

    192:GWY3Ro9kPRzjVap5F5rBfHOHAo9u8wGW1/Pgk/pDqX1TX5DESqyuZnZgprCZ5npK:GWaHhjVsHmAocZd1/f/pO1VDULERCZ58

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\document.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1692-54-0x0000000075921000-0x0000000075923000-memory.dmp
    Filesize

    8KB

    Download