8dfabaebbc9b53ce2df676284bcd9200dfc1dc50566ce3cc5b96cb3a32215854 | Triage

Analysis

max time kernel
4s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01/01/2024, 05:35

Sharing

Report Analysis Logs

General

Target

3c05cfa8eaffdf34790aef29bb7f770a.pdf
Size

13KB
MD5

3c05cfa8eaffdf34790aef29bb7f770a
SHA1

d6fb7bdf7d7d945031b02fddddfd67ffe7466c53
SHA256

8dfabaebbc9b53ce2df676284bcd9200dfc1dc50566ce3cc5b96cb3a32215854
SHA512

6e3f4a984cf9745baa3fd2ea174d9fa89b46c4d55f6d6dfc35069f96b206f21b1a20b0fd06f21a018a8b76ed0f848637f6a53acf234b8be4ca0134bcd66ac042
SSDEEP

384:6hzaNwAO9GiJlDmlAloSAhmbZ9/9Qi/60G7J8vKIs:ahZGirHAhmbZ9lQC6dJiKH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2508	AcroRd32.exe
2508	AcroRd32.exe
2508	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3c05cfa8eaffdf34790aef29bb7f770a.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2508-0-0x0000000002F50000-0x0000000002FC6000-memory.dmp

Filesize
472KB

Download
memory/2508-3-0x0000000000E40000-0x0000000000E41000-memory.dmp

Filesize
4KB

Download
memory/2508-4-0x0000000000E40000-0x0000000000E41000-memory.dmp

Filesize
4KB

Download