8afac92bec7a136bbcf18b8cb36a5c7b14d920fd908eee745efb66539491c7d8 | Triage

Analysis

max time kernel
160s
max time network
138s
platform
windows7_x64
resource
win7-en-20211208
submitted
19-02-2022 22:02

Sharing

Report Analysis Logs

General

Target

8afac92bec7a136bbcf18b8cb36a5c7b14d920fd908eee745efb66539491c7d8.pdf
Size

766KB
MD5

fe928252d87b18cb0d0820eca3bf047a
SHA1

c942292a7c9c8efd8d8ecdfde6a91c9b75d9ae9a
SHA256

8afac92bec7a136bbcf18b8cb36a5c7b14d920fd908eee745efb66539491c7d8
SHA512

88b1084d4e94db8a4591675f7d0babcbf11970a0c03c83f8817265f5178b41d6fc726f780f02a1ac916c35eabbfef2e377e3f20f7e580054b713ca541875bd24

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1628 AcroRd32.exe
1628 AcroRd32.exe
1628 AcroRd32.exe
1628 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8afac92bec7a136bbcf18b8cb36a5c7b14d920fd908eee745efb66539491c7d8.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1628-55-0x0000000075801000-0x0000000075803000-memory.dmp

Filesize
8KB

Download