f81b420323192b647d406600f81f96f328e76c06c0d31b7906be61269122d315 | Triage

Analysis

max time kernel
3s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 08:36

Sharing

Report Analysis Logs

General

Target

138f6061150868ea18ef38954876b5f9.pdf
Size

12KB
MD5

138f6061150868ea18ef38954876b5f9
SHA1

22c5f3288a10f7f41b5055fb493f754e22f71a42
SHA256

f81b420323192b647d406600f81f96f328e76c06c0d31b7906be61269122d315
SHA512

2ef8aaaa1b9a38262b826cd60a2167bc808958fea8bf33894967eea6e09151d71623de59e63cac41582b3c4375349b59df6cb37d808eb34b5ed083555911713e
SSDEEP

384:DLEMMLEtysyR+28MCN9XWDy498pRPFOF++:Dg/gi+28MCN9XWDyE3

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2396	AcroRd32.exe
2396	AcroRd32.exe
2396	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\138f6061150868ea18ef38954876b5f9.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2396-0-0x00000000028A0000-0x0000000002916000-memory.dmp

Filesize
472KB

Download
memory/2396-4-0x0000000000E60000-0x0000000000E61000-memory.dmp

Filesize
4KB

Download
memory/2396-3-0x0000000000E60000-0x0000000000E61000-memory.dmp

Filesize
4KB

Download