39ee98b50d3baf45320f32970f6baec8bae6971d478d1efa1b56e64eaef72a28 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 09:46

Sharing

Report Analysis Logs

General

Target

15133bffb3d5f172f6a606a4bfde08a6.pdf
Size

13KB
MD5

15133bffb3d5f172f6a606a4bfde08a6
SHA1

069656f307c7f3be7711a1f40ba778f47e392ec5
SHA256

39ee98b50d3baf45320f32970f6baec8bae6971d478d1efa1b56e64eaef72a28
SHA512

cfac2e353b1e586bca208014b9e1148f243ff965324c3b99db05f5b6c3dfba2239e7fca8726b66f295e9799d7e6388549b6f763f5e06b9b72fe5230cd0a405f7
SSDEEP

384:OhzaNwAO9GiCHZLJ0ZhrrGYQi/60G7wuj:ehZGiMJ0DrfQC6dwy

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1792	AcroRd32.exe
1792	AcroRd32.exe
1792	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\15133bffb3d5f172f6a606a4bfde08a6.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1792-0-0x00000000042A0000-0x0000000004316000-memory.dmp

Filesize
472KB

Download
memory/1792-4-0x0000000002650000-0x0000000002651000-memory.dmp

Filesize
4KB

Download
memory/1792-3-0x0000000002650000-0x0000000002651000-memory.dmp

Filesize
4KB

Download