42d1c057a6fbc9b067faa4ddb854d9a36ae8305ce4e07fd5d357d9e9a172d44a | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/02/2024, 03:36

Sharing

Report Analysis Logs

General

Target

9aa8a75643a7b35c9b46a1906a7302e6.pdf
Size

13KB
MD5

9aa8a75643a7b35c9b46a1906a7302e6
SHA1

c3a8073249ee7c594fcfadebd0cfecd88e192890
SHA256

42d1c057a6fbc9b067faa4ddb854d9a36ae8305ce4e07fd5d357d9e9a172d44a
SHA512

788f04107e84db1f3eba45f781578afdc122f6cd151168e09eb219a76c6da850d43d87192f708d894e51a8375d570082efe26c4fb3fd24c2ba8a3e7103ee8c62
SSDEEP

384:DLEMMLEtysyzpm7IRaRh7RRVjRW/z98pRPFOF++:Dg/gQOIRaRh7R7jRW/p3

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2416	AcroRd32.exe
2416	AcroRd32.exe
2416	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9aa8a75643a7b35c9b46a1906a7302e6.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2416-0-0x0000000003270000-0x00000000032E6000-memory.dmp

Filesize
472KB

Download
memory/2416-3-0x0000000002140000-0x0000000002141000-memory.dmp

Filesize
4KB

Download
memory/2416-4-0x0000000002140000-0x0000000002141000-memory.dmp

Filesize
4KB

Download