0be8eac742cc37e8296178944630ae63745ca451c0dba7befef70862afa68749 | Triage

Analysis

max time kernel
151s
max time network
35s
platform
windows7_x64
resource
win7-en-20210920
submitted
29-10-2021 19:12

Sharing

Report Analysis Logs

General

Target

qkzsvsqz748 mi.zzohiwj748 l.xuijyq748 xm.n748 gwld748 of.oxrb.748 lruss748 fu.knqqt.748 wecv748 zdbe.pdf
Size

120KB
MD5

f21eeba6485cca27d6b458669be7455b
SHA1

53b1f0e6d7bd74cb01463adfc262105544fafb54
SHA256

0be8eac742cc37e8296178944630ae63745ca451c0dba7befef70862afa68749
SHA512

95f1050469a5e4cfbeacae8445a18060ae7e0e90b908722f4caa07765202ed1365736618734ade7addf968bb42a8fff2c6ad4a5515d3a9ee83cf84c7de1a0f75

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1580 AcroRd32.exe
1580 AcroRd32.exe
1580 AcroRd32.exe
1580 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\qkzsvsqz748 mi.zzohiwj748 l.xuijyq748 xm.n748 gwld748 of.oxrb.748 lruss748 fu.knqqt.748 wecv748 zdbe.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1580

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1580-53-0x0000000076201000-0x0000000076203000-memory.dmp

Filesize
8KB

Download