e82195c78c4dd2edc439cbcb800fe08021d1997a00a5299793babe76cd54b594 | Triage

Analysis

max time kernel
152s
max time network
39s
platform
windows7_x64
resource
win7-en-20210920
submitted
29-10-2021 19:12

Sharing

Report Analysis Logs

General

Target

nvikej248 pp.gp248 cbvjil.po248 chqmcu.u248 hol.248 hphhlu248 efju248 .eat248 hrfmxy.jr248 kznl248 j.pdf
Size

121KB
MD5

79c7685ec352b1e7d8c5cde1b319a585
SHA1

942575e0ccd2845a7fd3b668d36cc56ac844ef0e
SHA256

e82195c78c4dd2edc439cbcb800fe08021d1997a00a5299793babe76cd54b594
SHA512

2327e9e029b8e442de23e3c84602665107581b902a32fe66262c21d955ff1d408f13c871e0cecbe3a4d1adcb0b6587f2bcf0a3dd975e1bd7aef1669df8e9dab0

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1116 AcroRd32.exe
1116 AcroRd32.exe
1116 AcroRd32.exe
1116 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\nvikej248 pp.gp248 cbvjil.po248 chqmcu.u248 hol.248 hphhlu248 efju248 .eat248 hrfmxy.jr248 kznl248 j.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1116

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1116-53-0x0000000075FC1000-0x0000000075FC3000-memory.dmp

Filesize
8KB

Download