e1aaeef30a2e8b30abf44493f6d9bf4958c698a4e8d15eb7c4cfefb5a9701779 | Triage

Analysis

max time kernel
155s
max time network
129s
platform
windows7_x64
resource
win7-en-20211208
submitted
12-02-2022 09:51

Sharing

Report Analysis Logs

General

Target

Lifting Inspectionsexlbzhqeng.pdf
Size

6KB
MD5

28059df5e15acedacc390b81dea68709
SHA1

71658a802f49fd306954cfc4ac5db7b49df07ecf
SHA256

e1aaeef30a2e8b30abf44493f6d9bf4958c698a4e8d15eb7c4cfefb5a9701779
SHA512

895fd4b44735819e8b755a9d740541a05ad7d1b121eb8605efcb7ab1b4772a1e8bba9e4b226d6ef73458e33595ac493c4927e0257b1b41711484ab4e84411cd7

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1588 AcroRd32.exe
1588 AcroRd32.exe
1588 AcroRd32.exe
1588 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Lifting Inspectionsexlbzhqeng.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1588

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1588-55-0x0000000075321000-0x0000000075323000-memory.dmp

Filesize
8KB

Download