19f44ea20027e8ee985c51490d3b14a32f8dc0dfdc4d7c3bbc98b878f915a1fc | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 19:04

Sharing

Report Analysis Logs

General

Target

3688350128f6df780a27e84aeb82a409.pdf
Size

13KB
MD5

3688350128f6df780a27e84aeb82a409
SHA1

44757a2f55c413125950e704e15cca3bca063a05
SHA256

19f44ea20027e8ee985c51490d3b14a32f8dc0dfdc4d7c3bbc98b878f915a1fc
SHA512

6970c9554c2105b740c431fd0e72ab9a8fec344872908784c3ec3141a5899c467b6fd5d0d350da3d3d6aaccf53e544b2eba64d2f526d49d513e1b7229e2f8f2b
SSDEEP

384:shzaNwAO9GiM5fdttt28Qi/60G78s4djN:khZGiM5fdttt28QC6d8si

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1672	AcroRd32.exe
1672	AcroRd32.exe
1672	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3688350128f6df780a27e84aeb82a409.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1672-0-0x0000000003270000-0x00000000032E6000-memory.dmp

Filesize
472KB

Download
memory/1672-4-0x00000000010A0000-0x00000000010A1000-memory.dmp

Filesize
4KB

Download
memory/1672-3-0x00000000010A0000-0x00000000010A1000-memory.dmp

Filesize
4KB

Download