Analysis

  • max time kernel
    26s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2023, 23:54

General

  • Target

    529985436-Negocios-Internacionales-Ambientes-y-Operaciones-PDFDrive.pdf

  • Size

    106.1MB

  • MD5

    96bb9062a3b9c5c084ce2b1f13f83fe0

  • SHA1

    df09bb23bc54aedcfdcee67098f960c070bf72bc

  • SHA256

    292cd0c28c391270e1664b76da68d98be3c6f9441853a64c6f60dffeca7923dc

  • SHA512

    59fd8df009257175400688ac632e8788c15dede1dd5cb3ea5aaec9d9c1c44b605fa286589e131f10cebcea8cdedbc71411e46f919d5620f413985ba5dfc140f1

  • SSDEEP

    3145728:pwnyENC4eN0aZvFY3kSpjRC+BScETr58Ur1:pwyEa0aZvG3kGQwSnTrtB

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\529985436-Negocios-Internacionales-Ambientes-y-Operaciones-PDFDrive.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1744-54-0x0000000076531000-0x0000000076533000-memory.dmp

    Filesize

    8KB