797f4b1d2aed168fef4d68274f279df7525f6f8be9f40971bedf5db8e4a157bf | Triage

Analysis

max time kernel
152s
max time network
141s
platform
windows7_x64
resource
win7-en-20211208
submitted
19-02-2022 22:15

Sharing

Report Analysis Logs

General

Target

797f4b1d2aed168fef4d68274f279df7525f6f8be9f40971bedf5db8e4a157bf.pdf
Size

652KB
MD5

8fe5f4c646fd1caa71cb772ed11ce2e5
SHA1

a16bf9a708858804e96177a1db9bc2403dc1d6ed
SHA256

797f4b1d2aed168fef4d68274f279df7525f6f8be9f40971bedf5db8e4a157bf
SHA512

0d28bbb6b4d2c67f2f14254ccd79916e3fa62c9d3f78a29c5bb965324fd4afbdb33d2a7849305ea3f3ed1260e53d89d2f119e731ca0adabc667825071d0cb386

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1488 AcroRd32.exe
1488 AcroRd32.exe
1488 AcroRd32.exe
1488 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\797f4b1d2aed168fef4d68274f279df7525f6f8be9f40971bedf5db8e4a157bf.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1488

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1488-55-0x0000000076851000-0x0000000076853000-memory.dmp

Filesize
8KB

Download