9b013f1db8df3f7f6e9efc92b8c3e44ee916e86bcbe031dc33f45df0c35b77d2 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 20:33

Sharing

Report Analysis Logs

General

Target

c98e34cc74e22584a77e26c406230cb3.pdf
Size

14KB
MD5

c98e34cc74e22584a77e26c406230cb3
SHA1

09452049efe9a58e8bd3ce8c0f62c5d961709cef
SHA256

9b013f1db8df3f7f6e9efc92b8c3e44ee916e86bcbe031dc33f45df0c35b77d2
SHA512

63ceb3876dab2a906e420ef5e7af02333700265fcbf1542864604e52f3471305df47d28739981fdedcc12187323ac4800e5a1430e7f3a3f45443965e27aac2da
SSDEEP

384:lhza9wAO9Gi5f0vsy0xSag2Qi/60G7BoG3Kr:j7ZGi5fQsy0xSyQC6dBvi

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2808	AcroRd32.exe
2808	AcroRd32.exe
2808	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c98e34cc74e22584a77e26c406230cb3.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2808-0-0x0000000003F40000-0x0000000003FB6000-memory.dmp

Filesize
472KB

Download
memory/2808-3-0x0000000000D00000-0x0000000000D01000-memory.dmp

Filesize
4KB

Download
memory/2808-4-0x0000000000D00000-0x0000000000D01000-memory.dmp

Filesize
4KB

Download