4d970e17d70f58160d05202a53f902c659af9617fe49b05621c3365d4a3b6670 | Triage

Analysis

max time kernel
153s
max time network
132s
platform
windows7_x64
resource
win7-en-20211208
submitted
19-02-2022 22:47

Sharing

Report Analysis Logs

General

Target

4d970e17d70f58160d05202a53f902c659af9617fe49b05621c3365d4a3b6670.pdf
Size

651KB
MD5

653e737fd4433a7cfe16df3768f1c07e
SHA1

c7b356f9a21a52ce05a661dae63259363b641ba3
SHA256

4d970e17d70f58160d05202a53f902c659af9617fe49b05621c3365d4a3b6670
SHA512

6851175354dca74a14613feb1cc70a4e74932bb91ee36f26f7f1936fa16a9c507ec42ea96faf1f17773678efd29efcdd39124906e581ec90c5074ec48bd9a933

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

560 AcroRd32.exe
560 AcroRd32.exe
560 AcroRd32.exe
560 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d970e17d70f58160d05202a53f902c659af9617fe49b05621c3365d4a3b6670.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:560

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/560-55-0x0000000076731000-0x0000000076733000-memory.dmp

Filesize
8KB

Download