b8183d41f994fc7fa669ca5e17cb43ca6b273405d0aac7c48173b80690b2b4b8 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 14:05

Sharing

Report Analysis Logs

General

Target

778edeac75b773c34034ee84ffef0eae.pdf
Size

13KB
MD5

778edeac75b773c34034ee84ffef0eae
SHA1

230a93302a004cfc176e2ea83471d6322e1ced17
SHA256

b8183d41f994fc7fa669ca5e17cb43ca6b273405d0aac7c48173b80690b2b4b8
SHA512

f9f94d0f4f77f2315338c01dcb1fc157807c9623071446b1baf2fbc7e1e93f0db92002b58cef286a604ed5dd618bd5d5f3ef01e53e591a359fc29ebbe7557b45
SSDEEP

384:DLEMMLEt/vysyycmz1b14h1JyothOeua8pRPFOF++:Dg/gV94h1JyothOeua3

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1308	AcroRd32.exe
1308	AcroRd32.exe
1308	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\778edeac75b773c34034ee84ffef0eae.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1308-0-0x00000000028D0000-0x0000000002946000-memory.dmp

Filesize
472KB

Download
memory/1308-3-0x0000000000C40000-0x0000000000C41000-memory.dmp

Filesize
4KB

Download
memory/1308-4-0x0000000000C40000-0x0000000000C41000-memory.dmp

Filesize
4KB

Download