6d1c94511a2bf30c8d5d5b7b2d1d6d4330899b5b5e9944ef039bf297d8cdd99c | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 12:09

Sharing

Report Analysis Logs

General

Target

1d2234eed42db2169e8bbff6fe15cc7f.pdf
Size

13KB
MD5

1d2234eed42db2169e8bbff6fe15cc7f
SHA1

04d0e3148f65854b2aa58ba16d1c7dae6ea0a6be
SHA256

6d1c94511a2bf30c8d5d5b7b2d1d6d4330899b5b5e9944ef039bf297d8cdd99c
SHA512

438572f356c63a8b082f5761be3649817012efd13bd6b147793a652382c8fd9ab2dfeb5a9e1d1ab7e23985af1b74b6d4c09d458efe7f62bf42b19265ff05bc65
SSDEEP

384:6hzaNwAO9GiJlDmlAloSAhmbZ9/dQi/60G7J8vKIs:ahZGirHAhmbZ91QC6dJiKH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2184	AcroRd32.exe
2184	AcroRd32.exe
2184	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1d2234eed42db2169e8bbff6fe15cc7f.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2184-0-0x0000000002B70000-0x0000000002BE6000-memory.dmp

Filesize
472KB

Download
memory/2184-3-0x0000000002220000-0x0000000002221000-memory.dmp

Filesize
4KB

Download
memory/2184-4-0x0000000002220000-0x0000000002221000-memory.dmp

Filesize
4KB

Download