13b5e66ff836372df8ef9318cf7e1cc498e535c7ce35e96f1076819c9061d31b | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 17:54

Sharing

Report Analysis Logs

General

Target

09c4c8f3185971c33b5c3031ca295e07.pdf
Size

13KB
MD5

09c4c8f3185971c33b5c3031ca295e07
SHA1

a2c36931766755a768be2fdec3ed698ed7ffc551
SHA256

13b5e66ff836372df8ef9318cf7e1cc498e535c7ce35e96f1076819c9061d31b
SHA512

74f102a807dc759182d9e5c501913ce9ff2f577ccd34052ee8bb264406a14ad2035e1d3e3ca59af46c612845c4271d3d5987aa93ea0b7d096d879283032d54e4
SSDEEP

384:shzaNwAO9GiM5fdtttrRQi/60G78s4djN:khZGiM5fdtttlQC6d8si

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2364	AcroRd32.exe
2364	AcroRd32.exe
2364	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09c4c8f3185971c33b5c3031ca295e07.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2364-0-0x00000000035F0000-0x0000000003666000-memory.dmp

Filesize
472KB

Download
memory/2364-3-0x0000000000D00000-0x0000000000D01000-memory.dmp

Filesize
4KB

Download
memory/2364-4-0x0000000000D00000-0x0000000000D01000-memory.dmp

Filesize
4KB

Download