Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 10:40

General

  • Target

    17e9540933d9729977a076dfddcad0b2.pdf

  • Size

    9KB

  • MD5

    17e9540933d9729977a076dfddcad0b2

  • SHA1

    8ad15620e2bef5056648a74a598e92cc90afe2be

  • SHA256

    52e38becc64a2c1d34b8590d0dbdd7b79253d7df38b61ad22ee735827c5cd413

  • SHA512

    8ce72cec306d2c6847e596972a5999eb52297729ddec08b3e4f9a820fdf8dbc80f2cea95c008b97ab70566e4a40c71f1d016057489a5f4cce5ffb56ccc03ed29

  • SSDEEP

    192:V9hzajYywAO9G+/v5vQNi/60un/TzLksZ0yMr96xiALKjjB:nhzazwAO9Gi9Qi/60G7z5Z256xdLKjN

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17e9540933d9729977a076dfddcad0b2.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/812-0-0x0000000003130000-0x00000000031A6000-memory.dmp

    Filesize

    472KB

  • memory/812-3-0x00000000024B0000-0x00000000024B1000-memory.dmp

    Filesize

    4KB

  • memory/812-4-0x00000000024B0000-0x00000000024B1000-memory.dmp

    Filesize

    4KB