12ce64d8dac6a46d44928efb3427d00b422ff1cf3ffccbd59f6c7a31a273bc10 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27-01-2024 01:49

Sharing

Report Analysis Logs

General

Target

78f7417a234a52847eab4a51024bab56.pdf
Size

12KB
MD5

78f7417a234a52847eab4a51024bab56
SHA1

2b22c8db156bb28c40747cc1d3a0b58b471ca00a
SHA256

12ce64d8dac6a46d44928efb3427d00b422ff1cf3ffccbd59f6c7a31a273bc10
SHA512

cf9d731a222b9dc6bc5c27c7c2683cdb953f1efd2a850b603ccd9adf84ed97378b57f4684917a8585cd1ddf505fa7bab8a000cf1d6fd77fb4ff035930b4fc9fa
SSDEEP

384:DLEMMLEtysyBSwKTwKKdgXVRTD98pRPFOF++:Dg/gKFKEKKdyVRTZ3

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1536	AcroRd32.exe
1536	AcroRd32.exe
1536	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\78f7417a234a52847eab4a51024bab56.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1536-0-0x0000000001090000-0x0000000001106000-memory.dmp

Filesize
472KB

Download
memory/1536-3-0x00000000025B0000-0x00000000025B1000-memory.dmp

Filesize
4KB

Download
memory/1536-4-0x00000000025B0000-0x00000000025B1000-memory.dmp

Filesize
4KB

Download