028d664e20ef703d98e9014f27fc9b57d25f7534a800385bc16b99d19094b645 | Triage

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27-01-2024 15:36

Sharing

Report Analysis Logs

General

Target

7a9f09e11febacfc6e6fa2d499d16a6b.pdf
Size

12KB
MD5

7a9f09e11febacfc6e6fa2d499d16a6b
SHA1

5da8db7a36533e99fd7c9e1511ad56efdd807245
SHA256

028d664e20ef703d98e9014f27fc9b57d25f7534a800385bc16b99d19094b645
SHA512

f7fc3aab584f6745202cdc56f57243397af4966e930c1b8ec19eec53fabf1c868b2afa81a3f351a31552b050e169ae92f021ba6c885bc70bfc5d60d800fe64c2
SSDEEP

384:DLEMys5No0O0UErx7olNPslxHK9Avh5CsIqy83RPFOF++:DgqIEYJ5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
856	AcroRd32.exe
856	AcroRd32.exe
856	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7a9f09e11febacfc6e6fa2d499d16a6b.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/856-0-0x00000000031B0000-0x0000000003226000-memory.dmp

Filesize
472KB

Download
memory/856-3-0x0000000001FF0000-0x0000000001FF1000-memory.dmp

Filesize
4KB

Download
memory/856-4-0x0000000001FF0000-0x0000000001FF1000-memory.dmp

Filesize
4KB

Download