41afd18dfff82428a44d4603f2034a9faa3664faa379beffdd3d9b1fc40e6b96 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 21:58

Sharing

Report Analysis Logs

General

Target

0501efc0cea3a426aff89449639e8bef.pdf
Size

13KB
MD5

0501efc0cea3a426aff89449639e8bef
SHA1

c38a625279744c35b0d8317a18aba950034495a1
SHA256

41afd18dfff82428a44d4603f2034a9faa3664faa379beffdd3d9b1fc40e6b96
SHA512

adc51882cc19cd403d425c5381eba26296169ad07e2a0089b08c0135d8a09819ca9f6d230876dd0772e8ea833459b8607499de2c908a7f5de026a2bb06d00bbf
SSDEEP

384:shzaNwAO9GiM5fdtttcmQi/60G78s4djN:khZGiM5fdttt7QC6d8si

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2220	AcroRd32.exe
2220	AcroRd32.exe
2220	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0501efc0cea3a426aff89449639e8bef.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2220-0-0x0000000003190000-0x0000000003206000-memory.dmp

Filesize
472KB

Download
memory/2220-3-0x00000000024F0000-0x00000000024F1000-memory.dmp

Filesize
4KB

Download
memory/2220-4-0x00000000024F0000-0x00000000024F1000-memory.dmp

Filesize
4KB

Download