c435583c6e1a109661d879aceeec3aca7bdfab5ab1d3b693d852e4f05413c55f | Triage

Analysis

max time kernel
167s
max time network
133s
platform
windows7_x64
resource
win7-en-20211208
submitted
12-02-2022 09:52

Sharing

Report Analysis Logs

General

Target

Winching Examination At Work In The Workplacemjqmrejclr.pdf
Size

6KB
MD5

610f0589ab62808374e23a04b9128678
SHA1

deba0dd25c07b7128a2785fad5705bed682eda3e
SHA256

c435583c6e1a109661d879aceeec3aca7bdfab5ab1d3b693d852e4f05413c55f
SHA512

50f41329966c6ecfd2c306af16590b3d4cb9e193ab73138d4cc69e32045d3caa31061ea800211e5628120282ea72ba2922965b622534f5c4b7532cb5a37bb9af

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1156 AcroRd32.exe
1156 AcroRd32.exe
1156 AcroRd32.exe
1156 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Winching Examination At Work In The Workplacemjqmrejclr.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1156

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1156-55-0x0000000076071000-0x0000000076073000-memory.dmp

Filesize
8KB

Download