3dee507f593266f9b4bbe9d50eddd906bee4295a4b64d7b6e8039286b321e700 | Triage

Analysis

max time kernel
31s
max time network
46s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
27/03/2023, 08:41

Sharing

Report Analysis Logs

General

Target

whatami.pdf
Size

14KB
MD5

97ccac199b8893380e14b0583596abb6
SHA1

5d6244a12982fa121b571affae6141d5db4437ee
SHA256

3dee507f593266f9b4bbe9d50eddd906bee4295a4b64d7b6e8039286b321e700
SHA512

fbed4a20d04412532389561e2557aa89c53952547806b4740667b6363f3f630117d01b39ac63e4bc8d5d74b2d362ab050a33e82fa440bd74762f6de9da54ca44
SSDEEP

384:bhzaNwAO9GiJug8LBqrnRgAt6swA+Qi/60G7LnKs:hhZGiJQURRthwA+QC6dZ

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2004	AcroRd32.exe
2004	AcroRd32.exe
2004	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\whatami.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2004-54-0x0000000002730000-0x00000000027A6000-memory.dmp

Filesize
472KB

Download
memory/2004-57-0x0000000000C60000-0x0000000000C61000-memory.dmp

Filesize
4KB

Download