Resubmissions

11/01/2023, 16:11

230111-tmzkgsdd99 1

Analysis

  • max time kernel
    52s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2023, 16:11

General

  • Target

    FLE_AC1200_NA05490Z_PM_01_P1946710_12-11-2022_180505.pdf

  • Size

    59KB

  • MD5

    0b4c1b7a6a20baedb6584d33b77d2f4a

  • SHA1

    c8e4187f0159dee4528a37403beb3ccc45cf5790

  • SHA256

    0b37e065cf854142d6a8ea400a30384d898539d8f65077b3cc66b5963e034589

  • SHA512

    b4997b52a63d30a5c3c038b850ead39fda8324229fdd4aaa61afa8f4e6e942c507f8d84de3d1da0b92ffd92e7e0209b37c8d99774bfc3395f4babea41de28eb4

  • SSDEEP

    1536:ZZ16YgHpy7jMbIsCKD34BW/PcrR9VEKa8TC:ZZ1TuUFQIBW/PcNLDa8W

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\FLE_AC1200_NA05490Z_PM_01_P1946710_12-11-2022_180505.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1616

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1616-54-0x0000000075C81000-0x0000000075C83000-memory.dmp

          Filesize

          8KB

        • memory/1616-55-0x00000000010B0000-0x0000000001126000-memory.dmp

          Filesize

          472KB