Overview

overview

5

Static

static

5

1b71a98c61...7a.pdf

windows7-x64

1

1b71a98c61...7a.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 14:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1b71a98c6156045c8da82a066c347a7a.pdf

  • Size

    12KB

  • MD5

    1b71a98c6156045c8da82a066c347a7a

  • SHA1

    0327492d37f7bd5f3bb4c9a6be5a3c700098f0e0

  • SHA256

    296d265bd3cfe0e4b9c1c11717b7c06ba6774e5edb50b60d43bee00d06658385

  • SHA512

    cf0dfbfec584c76eba225a23a5e29511b5aaaeea8e3c586aaa037d2f9bf1d65bf9edac1a994ddb8a085c969830877aab8a474cfcfa00ae0204cb960a12949356

  • SSDEEP

    384:DLEMMLEtysyNVmifKwI2UVM2KM3KwI2UVM2KD8ejEX98pRPFOF++:Dg/gajfKwI2UnKM3KwI2UnKDvAN3

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b71a98c6156045c8da82a066c347a7a.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2972-0-0x0000000002B50000-0x0000000002BC6000-memory.dmp

    Filesize

    472KB

    Download

  • memory/2972-3-0x0000000002160000-0x0000000002161000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2972-4-0x0000000002160000-0x0000000002161000-memory.dmp

    Filesize

    4KB

    Download