58b6fd6ab24acb5a194afcdfd2d5686415c487c07c1e071e69a109870a3cca91 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/03/2024, 22:20

Sharing

Report Analysis Logs

General

Target

e03b68d004ca355112e04635c49555d0.pdf
Size

13KB
MD5

e03b68d004ca355112e04635c49555d0
SHA1

49774ac35405f37b7394548c79f9798d907549fc
SHA256

58b6fd6ab24acb5a194afcdfd2d5686415c487c07c1e071e69a109870a3cca91
SHA512

2407615eb489c8b7f7f5e364076219fc0bf9cb5f1b954ce96516c33c7e4b3e9223d6e77c378a630a48c3845984ee6dbf14164112c64aad374dbb1e37100d248e
SSDEEP

384:6hzaNwAO9GiJlDmlAloSAhmbZ9/KQi/60G7J8vKIs:ahZGirHAhmbZ9iQC6dJiKH

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2548	AcroRd32.exe
2548	AcroRd32.exe
2548	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e03b68d004ca355112e04635c49555d0.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2548-0-0x0000000002980000-0x00000000029F6000-memory.dmp

Filesize
472KB

Download
memory/2548-3-0x0000000000D60000-0x0000000000D61000-memory.dmp

Filesize
4KB

Download
memory/2548-4-0x0000000000D60000-0x0000000000D61000-memory.dmp

Filesize
4KB

Download