Analysis
- max time kernel
151s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
12/10/2026, 23:16
General
- Target SynPDF-0.6.0-Windows-x64/synpdf.exe
- Size 59.8MB
- Sample261012-28414asvbz
- SHA256 8142168aadb23d247e5d4a69ccda3b03eb2f60c8bf5ad415b85d2c5f0ac87d9f
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SynPDF-0.6.0-Windows-x64\synpdf.exe"C:\Users\Admin\AppData\Local\Temp\SynPDF-0.6.0-Windows-x64\synpdf.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4436-2-0x000001D49D160000-0x000001D49D161000-memory.dmp
memory/4436-0-0x000001D49D160000-0x000001D49D161000-memory.dmp
memory/4436-3-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-4-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-5-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-7-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-8-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-9-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-11-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-12-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-13-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-15-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-16-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-17-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-19-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp
memory/4436-20-0x00007FF641EE0000-0x00007FF6451F9000-memory.dmp