08d1a52dfc0fc652cdcb66a66cf1f4bd9f76cbfd35404b5b0eccf5ea7e3b2643 | Triage

Analysis

max time kernel
129s
max time network
46s
platform
windows7_x64
resource
win7-20220331-en
submitted
06-04-2022 11:09

Sharing

Report Analysis Logs

General

Target

08d1a52dfc0fc652cdcb66a66cf1f4bd9f76cbfd35404b5b0eccf5ea7e3b2643.pdf
Size

85KB
MD5

129a59dbf156f426ef619363d3e8d311
SHA1

f1a3564a89bdf24ff0b472f7ea8cca96c82c84e9
SHA256

08d1a52dfc0fc652cdcb66a66cf1f4bd9f76cbfd35404b5b0eccf5ea7e3b2643
SHA512

f15adbf9f9c2867c4191e0d121342e494be92885f9d8d32c7ee7ee5ed80eacf4fff18426202c394eef1da8d0d1c0a186510685bb327ecad6db7892a78b3b4a12

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

480 AcroRd32.exe
480 AcroRd32.exe
480 AcroRd32.exe
480 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08d1a52dfc0fc652cdcb66a66cf1f4bd9f76cbfd35404b5b0eccf5ea7e3b2643.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:480

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/480-54-0x0000000075821000-0x0000000075823000-memory.dmp

Filesize
8KB

Download