9983eb5d8d5f59a62fe113a7e7b2b64742db4ed9c552ab900788eea75aa889ef | Triage

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14-01-2024 10:52

Sharing

Report Analysis Logs

General

Target

5b0c3402af50b63ddf0817eab800611d.pdf
Size

12KB
MD5

5b0c3402af50b63ddf0817eab800611d
SHA1

85fd6f66620d310759e07cb477071481fb3821d8
SHA256

9983eb5d8d5f59a62fe113a7e7b2b64742db4ed9c552ab900788eea75aa889ef
SHA512

cd9606bdd71ef8eebede24e91669308e4eea781c6b4a83142c76068034f621a30a8664a180912783c1daa9857ce688c33c275fe3b0b5e10160ad2045d4aed166
SSDEEP

384:DLEMys5YD0O0UErx7olNPslxHK9Avh5CsIqy83RPFOF++:DgkIEYJ5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1976	AcroRd32.exe
1976	AcroRd32.exe
1976	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b0c3402af50b63ddf0817eab800611d.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1976-0-0x00000000031B0000-0x0000000003226000-memory.dmp

Filesize
472KB

Download
memory/1976-3-0x0000000002930000-0x0000000002931000-memory.dmp

Filesize
4KB

Download
memory/1976-4-0x0000000002930000-0x0000000002931000-memory.dmp

Filesize
4KB

Download