80cbaa5be6218a1ca4c09ff90e0d76d94a8a925dd60de74e49a8e2bbb979bac5 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 20:19 UTC

Sharing

Report Analysis Logs

General

Target

1bb95bf32ebc30397d65aa3b5fff455c.pdf
Size

12KB
MD5

1bb95bf32ebc30397d65aa3b5fff455c
SHA1

1d60eb77e8a6fe170fef85d620b5d3fcc929f736
SHA256

80cbaa5be6218a1ca4c09ff90e0d76d94a8a925dd60de74e49a8e2bbb979bac5
SHA512

15af72bfa4f9ad29daaf2f631bdbde240e9d78567a21df4d22617e686902ff712ed1070f580457328b36ff65bd794374e998500d1b75518b8343a7e40e8161f3
SSDEEP

384:DLEMys5EX0O0UErx7olNPslxHK9Avh5CsIqy83RPFOF++:DgwIEYJ5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2180	AcroRd32.exe
2180	AcroRd32.exe
2180	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1bb95bf32ebc30397d65aa3b5fff455c.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2180

Network

No results found

79.137.237.66:80

AcroRd32.exe

152 B
3
79.137.237.66:80

AcroRd32.exe

152 B
3

No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2180-0-0x00000000012F0000-0x0000000001366000-memory.dmp

Filesize
472KB

Download
memory/2180-3-0x0000000000C00000-0x0000000000C01000-memory.dmp

Filesize
4KB

Download
memory/2180-4-0x0000000000C00000-0x0000000000C01000-memory.dmp

Filesize
4KB

Download