2e6559ace945c649833ed2cdbe916f64d4749e1c98d17c511a601198d2b7365b | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/03/2024, 11:42

Sharing

Report Analysis Logs

General

Target

d605d55446720e131b17872a63f44b8e.pdf
Size

12KB
MD5

d605d55446720e131b17872a63f44b8e
SHA1

d17ae9f72e004b38c105eb312b14354015d854e1
SHA256

2e6559ace945c649833ed2cdbe916f64d4749e1c98d17c511a601198d2b7365b
SHA512

0a22f4268ce8eba7fb3877f9aa151298f601849784e925741023787bbadfd85a1b78d35cedcad5d93fe835570c1ddd844216ac184cc52f7d33551d5e625b32a1
SSDEEP

384:DLEMys5rW0O0UErx7olNPslxHK9Avh5CsIqy83RPFOF++:DguIEYJ5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2984	AcroRd32.exe
2984	AcroRd32.exe
2984	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d605d55446720e131b17872a63f44b8e.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2984-0-0x00000000040D0000-0x0000000004146000-memory.dmp

Filesize
472KB

Download
memory/2984-3-0x0000000002040000-0x0000000002041000-memory.dmp

Filesize
4KB

Download
memory/2984-4-0x0000000002040000-0x0000000002041000-memory.dmp

Filesize
4KB

Download