f12b03dcd1e56199bf35dbcb9678c8d8455d2d7c6b22f8fa585e8cb1c5495804 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06-03-2024 11:32

Sharing

Report Analysis Logs

General

Target

b74acc099ceb17638ef15bbe1257b6c4.pdf
Size

51KB
MD5

b74acc099ceb17638ef15bbe1257b6c4
SHA1

323ca054b433ccd088cce7546052a1a33a1c57d3
SHA256

f12b03dcd1e56199bf35dbcb9678c8d8455d2d7c6b22f8fa585e8cb1c5495804
SHA512

3d5768ced00c50dd6e31855b594e1034b61f1097f6d1b05c80832c9a7f4afc2fa234dc236f5002b3b54f25ae9359b05ed841e457427b00988d609e096a441877
SSDEEP

384:WysNCs+KalDWNdP9nDohnNC7f4Z1AMz4E+:inDohnNC7QZw

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1708	AcroRd32.exe
1708	AcroRd32.exe
1708	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b74acc099ceb17638ef15bbe1257b6c4.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1708-0-0x0000000003260000-0x00000000032D6000-memory.dmp

Filesize
472KB

Download
memory/1708-3-0x0000000000C20000-0x0000000000C21000-memory.dmp

Filesize
4KB

Download
memory/1708-4-0x0000000000C20000-0x0000000000C21000-memory.dmp

Filesize
4KB

Download