Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 09:28

General

  • Target

    63cb8e7306b40a334500e128327d3fe1.pdf

  • Size

    9KB

  • MD5

    63cb8e7306b40a334500e128327d3fe1

  • SHA1

    17e2a65d310483d06e95c2399a3276e3f3d4d475

  • SHA256

    58bf0eee9dc71f3c02af5f874c7a07d4dc115f74b5392be2545d201f3b293d04

  • SHA512

    8e7df3c83d876198b3b12ff6018f9ad615a8357dc97b0a0e0d9a98592cd9f69cc158beedd8ec19d22b536f8d79af7c9c3562e41241d1772bc4ed67094bf8bc36

  • SSDEEP

    192:F3hzajYywAO9G+/vqvQNi/60un/TF/h17ivDGiI5yFojE:dhzazwAO9GiUQi/60G75h0vDugoY

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63cb8e7306b40a334500e128327d3fe1.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2464-0-0x0000000003190000-0x0000000003206000-memory.dmp

    Filesize

    472KB

  • memory/2464-3-0x00000000021A0000-0x00000000021A1000-memory.dmp

    Filesize

    4KB

  • memory/2464-4-0x00000000021A0000-0x00000000021A1000-memory.dmp

    Filesize

    4KB