Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20/03/2024, 01:40

General

  • Target

    d7992efb2f07125c855870bced37932e.pdf

  • Size

    9KB

  • MD5

    d7992efb2f07125c855870bced37932e

  • SHA1

    7547ec6f1cc76ffc72f74e2630349245a56fb2a1

  • SHA256

    00494c034c77aca24721878e1dae90ee052ba640efb69c818de830d999b45dd1

  • SHA512

    481349c18e9cad80697f83624b676bfe0135f8eda06da7579371722dce5b1274f5ce07e9d800730f9a723a8b06b0d1bd5b2b1108f7032ff04eb8478472d507af

  • SSDEEP

    192:F3hzajYywAO9G+/vqvQNi/60un/Trul5coW0Lz6lT4PGd+G6cjjE:dhzazwAO9GiUQi/60G7riE+z6mejY

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7992efb2f07125c855870bced37932e.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1636-0-0x0000000003D90000-0x0000000003E06000-memory.dmp

    Filesize

    472KB

  • memory/1636-3-0x00000000025C0000-0x00000000025C1000-memory.dmp

    Filesize

    4KB

  • memory/1636-4-0x00000000025C0000-0x00000000025C1000-memory.dmp

    Filesize

    4KB