5decfd289b6afdebc869fed20927ce80536c4d5c30006a8b71a6dabc8f20a002 | Triage

Analysis

max time kernel
120s
max time network
130s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 00:47

Sharing

Report Analysis Logs

General

Target

09020344ff667226d26c3d84506b51ac.pdf
Size

12KB
MD5

09020344ff667226d26c3d84506b51ac
SHA1

25844fec1e2fa685f236ea015bd62b51815672fd
SHA256

5decfd289b6afdebc869fed20927ce80536c4d5c30006a8b71a6dabc8f20a002
SHA512

b9944d8de49ab766af26fdfebef1ce39cb4485523e794d7380850974ef924e335602a8bd974523f0cf06406f4eeb59d1b1758356e07612e639b78619f820b517
SSDEEP

384:DLEMMLEtysyXqm5fA7dZOfA7dZ053W98pRPFOF++:Dg/gEU7dr7dI23

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2700	AcroRd32.exe
2700	AcroRd32.exe
2700	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09020344ff667226d26c3d84506b51ac.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2700-0-0x0000000004D50000-0x0000000004DC6000-memory.dmp

Filesize
472KB

Download
memory/2700-3-0x0000000000CC0000-0x0000000000CC1000-memory.dmp

Filesize
4KB

Download
memory/2700-4-0x0000000000CC0000-0x0000000000CC1000-memory.dmp

Filesize
4KB

Download