6f564f0ea47823fac65278a0a274cef6cff3248dfeeff3402fde92506866c70f | Triage

Analysis

max time kernel
166s
max time network
137s
platform
windows7_x64
resource
win7-en-20211208
submitted
19-02-2022 07:47

Sharing

Report Analysis Logs

General

Target

UPDATED_MEMO_-_Mandatory_COVID-19_Vaccination_Booster_and_Testing_per_the_December_22_2021_CDPH_Order_1.28.22.pdf
Size

1.1MB
MD5

8ef98fbda7bd72a3bff348dca926a008
SHA1

d964514dd55cf3b736898076b928b57df9ea4cfb
SHA256

6f564f0ea47823fac65278a0a274cef6cff3248dfeeff3402fde92506866c70f
SHA512

340a4a14fd9f23179dd569aca06d605c779f069c9cf79e99d6769b29e8ed86d1580533854b3f5d72c65ed85188cb2e1e74e4670ac2a94017a9120d638ab3dc88

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

860 AcroRd32.exe
860 AcroRd32.exe
860 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\UPDATED_MEMO_-_Mandatory_COVID-19_Vaccination_Booster_and_Testing_per_the_December_22_2021_CDPH_Order_1.28.22.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:860

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/860-55-0x0000000076731000-0x0000000076733000-memory.dmp

Filesize
8KB

Download
memory/860-56-0x0000000000DA0000-0x0000000000E16000-memory.dmp

Filesize
472KB

Download