19e5f62a4e5a0f6fcf9a08236d16d53c7c78e8dd4f2265d4b62ef77ef96c764f | Triage

Analysis

max time kernel
121s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 02:31

Sharing

Report Analysis Logs

General

Target

4ccbe9f4c08446b4bf21a2d0c2b51ffe.pdf
Size

13KB
MD5

4ccbe9f4c08446b4bf21a2d0c2b51ffe
SHA1

46fabaa6e9ec3b1a19380255000b28e15f3769ad
SHA256

19e5f62a4e5a0f6fcf9a08236d16d53c7c78e8dd4f2265d4b62ef77ef96c764f
SHA512

84525fc3440cabc3826b4a40d66b8a004269e7d587f8426b3b748b442659684a6d4a57be9b868652d531eb3f2b623388595eb418e2234534cf8ff10e08999a09
SSDEEP

384:6hzaNwAO9GiJlDmlAloSAhmbZ9//Qi/60G7J8vKIs:ahZGirHAhmbZ9XQC6dJiKH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2532	AcroRd32.exe
2532	AcroRd32.exe
2532	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4ccbe9f4c08446b4bf21a2d0c2b51ffe.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2532-0-0x0000000000F40000-0x0000000000FB6000-memory.dmp

Filesize
472KB

Download
memory/2532-3-0x0000000000D10000-0x0000000000D11000-memory.dmp

Filesize
4KB

Download
memory/2532-4-0x0000000000D10000-0x0000000000D11000-memory.dmp

Filesize
4KB

Download