e4782f65b7512ed204fdd608fe9080f26301804b53d56ba1e84b4857d08d4af0 | Triage

Analysis

max time kernel
49s
max time network
46s
platform
windows7_x64
resource
win7-20220331-en
submitted
08-04-2022 18:50

Sharing

Report Analysis Logs

General

Target

t80o47k5rk9..pdf
Size

163KB
MD5

9ab6bbcf6dd87edd94b244f3f94683d4
SHA1

aae54bf6c1e35abd294c9a81660a50385b45ee86
SHA256

e4782f65b7512ed204fdd608fe9080f26301804b53d56ba1e84b4857d08d4af0
SHA512

cb154bf5bdcc400969b3f4739fee6aee1bf8954cdf5268f54c93d03e70aed1fd3d757de3fe473e8c3264fcaa1c1f027bd64f6d9bd6f5a16b5bf341f723842723

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

684 AcroRd32.exe
684 AcroRd32.exe
684 AcroRd32.exe
684 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\t80o47k5rk9..pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:684

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/684-54-0x0000000075511000-0x0000000075513000-memory.dmp

Filesize
8KB

Download