56dbe5286a44a6a312324f38168ba39cb891d57add99d7f7b0b4b8bbd5898708 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
28/01/2024, 10:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7cd50bb5018e94ecc2a1e70e7d716227.pdf
Size

13KB
MD5

7cd50bb5018e94ecc2a1e70e7d716227
SHA1

9e85bfd203db28d7a105143dd21ffcf3c1beec33
SHA256

56dbe5286a44a6a312324f38168ba39cb891d57add99d7f7b0b4b8bbd5898708
SHA512

131466e876f927e70c4440520dde2bb689904fb1330e3774dadd620a3bc4b42673d20913f7bc49f19e5b41ceabd0b0052dbee430faad8dbfb4b0d0d2ac1bc465
SSDEEP

384:khzaNwAO9GikR32zDR27l9BRiiFQi/60G7Vcvs:shZGikY07LBR9QC6dZ

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2724	AcroRd32.exe
2724	AcroRd32.exe
2724	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7cd50bb5018e94ecc2a1e70e7d716227.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2724-0-0x00000000032D0000-0x0000000003346000-memory.dmp

Filesize
472KB

Download
memory/2724-3-0x00000000010A0000-0x00000000010A1000-memory.dmp

Filesize
4KB

Download
memory/2724-4-0x00000000010A0000-0x00000000010A1000-memory.dmp

Filesize
4KB

Download