5c55023eb6c502f46e19f72bb791fc791015cd91869f0a787091f2615378cc07 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18/01/2024, 09:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6506cb03dd663fee98ca15f17a339242.pdf
Size

13KB
MD5

6506cb03dd663fee98ca15f17a339242
SHA1

2d947aa55804cc2c5c65112f56ee2534b8844f74
SHA256

5c55023eb6c502f46e19f72bb791fc791015cd91869f0a787091f2615378cc07
SHA512

20c97ffaa5ace0aad3fe6c916ca5f86ea51bbe3ba5319a00305ebc333b45250b36f3943eb623df52662cb3ed9c3185f2c3ddb6768662eb7f88d6fa6eca875ed8
SSDEEP

384:6hzaNwAO9GiJlDmlAloSAhmbZ9/vQi/60G7J8vKIs:ahZGirHAhmbZ9nQC6dJiKH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2996	AcroRd32.exe
2996	AcroRd32.exe
2996	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6506cb03dd663fee98ca15f17a339242.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2996-0-0x00000000043C0000-0x0000000004436000-memory.dmp

Filesize
472KB

Download
memory/2996-3-0x00000000025C0000-0x00000000025C1000-memory.dmp

Filesize
4KB

Download
memory/2996-4-0x00000000025C0000-0x00000000025C1000-memory.dmp

Filesize
4KB

Download