21e2b92e1f777526fdf277e800f96a14f358ff2a14feb785c489c09655abd99f | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 07:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

12b9a168fe867876949d4a617416dde0.pdf
Size

13KB
MD5

12b9a168fe867876949d4a617416dde0
SHA1

9c8208f113f0ddc576315aad0576aef1eed389d6
SHA256

21e2b92e1f777526fdf277e800f96a14f358ff2a14feb785c489c09655abd99f
SHA512

67414d0354aea94d6a0f9f924c2b59f822a235f06cbed6a9171ac429b13f4ba4cf56b567d6b2affe0a9f4918c04f9354ab7f2bc523dd18e2d60d75ceb8e84319
SSDEEP

384:6hzaNwAO9GiJlDmlAloSAhmbZ9/QQi/60G7J8vKIs:ahZGirHAhmbZ9oQC6dJiKH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3036	AcroRd32.exe
3036	AcroRd32.exe
3036	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12b9a168fe867876949d4a617416dde0.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3036-0-0x0000000002750000-0x00000000027C6000-memory.dmp

Filesize
472KB

Download
memory/3036-3-0x00000000025C0000-0x00000000025C1000-memory.dmp

Filesize
4KB

Download
memory/3036-4-0x00000000025C0000-0x00000000025C1000-memory.dmp

Filesize
4KB

Download