2d1f26ec1d8b767db8ef1e7da6109a96e09cd4ec34e987315e503400892c3fba | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 14:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

75a4d95f627e33f87eab66cd5ee72dc9.pdf
Size

13KB
MD5

75a4d95f627e33f87eab66cd5ee72dc9
SHA1

a1b75bc3e9d97e068addfae1c43ea42291752aca
SHA256

2d1f26ec1d8b767db8ef1e7da6109a96e09cd4ec34e987315e503400892c3fba
SHA512

8955c7bf7e4d652187336aa06b001155a4d8b223e97b9f60544d63c0ba2635e46f71cbf7e4fc944575c282c6ef414ceae75e36f83813fb803eb47042855b778b
SSDEEP

384:6hzaNwAO9GiJlDmlAloSAhmbZ9/NQi/60G7J8vKIs:ahZGirHAhmbZ9FQC6dJiKH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2936	AcroRd32.exe
2936	AcroRd32.exe
2936	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\75a4d95f627e33f87eab66cd5ee72dc9.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2936-0-0x0000000003B50000-0x0000000003BC6000-memory.dmp

Filesize
472KB

Download
memory/2936-3-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/2936-4-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download