a3105525353068de3e2f90fc29788ad401dd361828861449cd608dd3240295be | Triage

Resubmissions

23-03-2022 17:40

220323-v9c6faebbp 3

23-03-2022 17:28

220323-v2g5eseaar 8

Analysis

max time kernel
4294123s
max time network
17s
platform
windows7_x64
resource
win7-20220310-en
submitted
23-03-2022 17:40

Sharing

Report Analysis Logs

General

Target

designjet_3d.pdf
Size

2.2MB
MD5

b9603f5bea4085e4a544158601e8f7fd
SHA1

8c93e71254c48c9becb716d8ac946cc3879ca483
SHA256

a3105525353068de3e2f90fc29788ad401dd361828861449cd608dd3240295be
SHA512

c72724dc1424f37e363d3a7dcee5cc69d936c64b995b58497877ae7c9bfe8da616bf9fad14f63a36ee5644bb6bff3e6c3fa09e408728332ab201842232ce889a

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1632 AcroRd32.exe
1632 AcroRd32.exe
1632 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\designjet_3d.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1632

C:\Windows\system32\notepad.exe
"C:\Windows\system32\notepad.exe"
1⤵
PID:1964

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-54-0x00000000766A1000-0x00000000766A3000-memory.dmp

Filesize
8KB

Download
memory/1964-55-0x000007FEFC061000-0x000007FEFC063000-memory.dmp

Filesize
8KB

Download