49b85a317ccb3155b6657a2c3838f2566d93be79b627977a41f333526492b4c8 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 23:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4256bb51b9ff32511dcd711dfaa4ccf3.pdf
Size

13KB
MD5

4256bb51b9ff32511dcd711dfaa4ccf3
SHA1

17f5f3eab7aaaff9905145a77f8ba113b0511846
SHA256

49b85a317ccb3155b6657a2c3838f2566d93be79b627977a41f333526492b4c8
SHA512

c0cad57818e91dc4393c2b10526fe38b0db96b29a210d274772c2df2314619a1b5e7fa3ab18aeb26543b0aaa4eb4c0bd30330ca67e36be13f2a6055758575a4b
SSDEEP

384:6hzaNwAO9GiJlDmlAloSAhmbZ9/1Qi/60G7J8vKIs:ahZGirHAhmbZ9dQC6dJiKH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1072	AcroRd32.exe
1072	AcroRd32.exe
1072	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4256bb51b9ff32511dcd711dfaa4ccf3.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1072-0-0x00000000030A0000-0x0000000003116000-memory.dmp

Filesize
472KB

Download
memory/1072-3-0x0000000000CA0000-0x0000000000CA1000-memory.dmp

Filesize
4KB

Download
memory/1072-4-0x0000000000CA0000-0x0000000000CA1000-memory.dmp

Filesize
4KB

Download