Analysis
- max time kernel
148s - max time network
125s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
12/10/2026, 23:16
General
- Target SynPDF-0.6.0-Windows-x64/synpdf.exe
- Size 59.8MB
- Sample261012-28414asvbz
- SHA256 8142168aadb23d247e5d4a69ccda3b03eb2f60c8bf5ad415b85d2c5f0ac87d9f
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SynPDF-0.6.0-Windows-x64\synpdf.exe"C:\Users\Admin\AppData\Local\Temp\SynPDF-0.6.0-Windows-x64\synpdf.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
app.ron
memory/5788-9-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-12-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-3-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-4-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-5-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-7-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-8-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-0-0x000001B58F0E0000-0x000001B58F0E1000-memory.dmp
memory/5788-1-0x000001B58F0E0000-0x000001B58F0E1000-memory.dmp
memory/5788-13-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-11-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-15-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-16-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-17-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-2-0x000001B58F0E0000-0x000001B58F0E1000-memory.dmp
memory/5788-19-0x00007FF730A10000-0x00007FF733D29000-memory.dmp
memory/5788-20-0x00007FF730A10000-0x00007FF733D29000-memory.dmp