Analysis

  • max time kernel
    106s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    02-01-2023 18:18

General

  • Target

    Demande Visa Madame PDF.pdf

  • Size

    88KB

  • MD5

    b07204b0d4544673bbfa9bff751ff93c

  • SHA1

    938417459fa83726389723123a3ea91b98039ee9

  • SHA256

    a899e8564b7d4d20c3ba5bbb11721418f3cf00326f3071a89ee90b562f8ad44e

  • SHA512

    b7c6fc5d1cbeec121b51b0456078a327f7ade99aa08f2726988be24c59007fbec3cb476236a75c3f8e11e3f1093e1f90797ea7b82fc27dee7e882e2cba2d1466

  • SSDEEP

    1536:8T0BuO9JCKY7fnEKzPeCLK/EV2B4XjpOcIRz+fs8KElHfWFiti+6bMFLfly1+CTV:8T0IO9JC7fhLeCms4B4Xj0jcsbwI0YI6

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Demande Visa Madame PDF.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1324-54-0x0000000075A11000-0x0000000075A13000-memory.dmp

    Filesize

    8KB