679548651228e0f10dbd3e3b7449d68099de14c80ead13e4e71f38715e6e3d7d | Triage

Analysis

max time kernel
4294215s
max time network
139s
platform
windows7_x64
resource
win7-20220310-en
submitted
24-03-2022 22:24

Sharing

Report Analysis Logs

General

Target

679548651228e0f10dbd3e3b7449d68099de14c80ead13e4e71f38715e6e3d7d.pdf
Size

36KB
MD5

ff485dca8b171a4aa9e3bf6a9c014a32
SHA1

6341e5eda82ee67af7a17219a75681cc25fd3a50
SHA256

679548651228e0f10dbd3e3b7449d68099de14c80ead13e4e71f38715e6e3d7d
SHA512

fbcf0fa1bf00de5a415625ba6bc263779423aa53c193361e88b6629093ee79f1279870a4bd2a725b05ce16bb7c7de2061c2c01ccdfdf0ba2ab140e5d93940e83

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

536 AcroRd32.exe
536 AcroRd32.exe
536 AcroRd32.exe
536 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\679548651228e0f10dbd3e3b7449d68099de14c80ead13e4e71f38715e6e3d7d.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/536-54-0x0000000076141000-0x0000000076143000-memory.dmp

Filesize
8KB

Download