671fbc5a6ffd574dbcb338dc9c784d845a3abb9cfe4a0376ea4fcb3f2e9d1e08 | Triage

Analysis

max time kernel
4294213s
max time network
132s
platform
windows7_x64
resource
win7-20220310-en
submitted
24-03-2022 22:24

Sharing

Report Analysis Logs

General

Target

671fbc5a6ffd574dbcb338dc9c784d845a3abb9cfe4a0376ea4fcb3f2e9d1e08.pdf
Size

48KB
MD5

51f4bd2f335fd6ed8e6347ad6133c5ce
SHA1

a22d9e20ed8d06478f01d866516aa9e278e5cd29
SHA256

671fbc5a6ffd574dbcb338dc9c784d845a3abb9cfe4a0376ea4fcb3f2e9d1e08
SHA512

ca97cead21a729b8e982590f23f36bad0a0082b220c125a2f26e428e91c02b5e8d8784d30e216108b37b1349da190c127780bb149b5fc45f678968bd51e7bc2e

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1808 AcroRd32.exe
1808 AcroRd32.exe
1808 AcroRd32.exe
1808 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\671fbc5a6ffd574dbcb338dc9c784d845a3abb9cfe4a0376ea4fcb3f2e9d1e08.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1808

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1808-54-0x00000000760A1000-0x00000000760A3000-memory.dmp

Filesize
8KB

Download