f8c47e88187975630523791b91cd26e97a79650122e2d3094c71cf83ed2af70a | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/01/2024, 03:55

Sharing

Report Analysis Logs

General

Target

7ed1566b650e68992560e015c365d646.pdf
Size

12KB
MD5

7ed1566b650e68992560e015c365d646
SHA1

01edbeedbba7dd35bad9270df24e1c9b4fe76faf
SHA256

f8c47e88187975630523791b91cd26e97a79650122e2d3094c71cf83ed2af70a
SHA512

69dc510d23d24f1dfdae0f85665745b3ab40ee2c0dc8087dced967af0de247d1bed156077d12f15b0c51855202e23e04709936b206942ab83c6a1f6902b43127
SSDEEP

384:DLEMys57m0O0UErx7olNPslxHK9Avh5CsIqy83RPFOF++:Dg2IEYJ5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1724	AcroRd32.exe
1724	AcroRd32.exe
1724	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ed1566b650e68992560e015c365d646.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1724-0-0x0000000002F50000-0x0000000002FC6000-memory.dmp

Filesize
472KB

Download
memory/1724-3-0x0000000002050000-0x0000000002051000-memory.dmp

Filesize
4KB

Download
memory/1724-4-0x0000000002050000-0x0000000002051000-memory.dmp

Filesize
4KB

Download