b2a6385c3f4b161aeaa731ea60d419bf75a0ff098dd397ecd6f0c2c1431a691c | Triage

Analysis

max time kernel
152s
max time network
121s
platform
windows7_x64
resource
win7-en-20211208
submitted
02-02-2022 02:12

Sharing

Report Analysis Logs

General

Target

b2a6385c3f4b161aeaa731ea60d419bf75a0ff098dd397ecd6f0c2c1431a691c.pdf
Size

74KB
MD5

72950325644838b18c5d4e86d4dbda1d
SHA1

190443eaa2ea924fadda7a57646d57f5337d42b0
SHA256

b2a6385c3f4b161aeaa731ea60d419bf75a0ff098dd397ecd6f0c2c1431a691c
SHA512

d05d313d8a6acf694b5f82474ceb9fb53b73883c6f3da5ab64a14f38e81bfddad64cbdd8f3b6853a838a044c61933aff73a153add288077024d524fba315bfe5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1304 AcroRd32.exe
1304 AcroRd32.exe
1304 AcroRd32.exe
1304 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b2a6385c3f4b161aeaa731ea60d419bf75a0ff098dd397ecd6f0c2c1431a691c.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1304-55-0x0000000075F91000-0x0000000075F93000-memory.dmp

Filesize
8KB

Download