b1726e6d6f0dd0fb03edb0facfa4ec71d723388e974e8f4db2e08ce8dbaa67d3 | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220331-en
submitted
09-04-2022 02:44

Sharing

Report Analysis Logs

General

Target

b1726e6d6f0dd0fb03edb0facfa4ec71d723388e974e8f4db2e08ce8dbaa67d3.pdf
Size

16.9MB
MD5

78ce9bacf9d2fafcacdc10af2b627bdb
SHA1

679fce2809ff3e0bea7c0ec87389b4638f96fa13
SHA256

b1726e6d6f0dd0fb03edb0facfa4ec71d723388e974e8f4db2e08ce8dbaa67d3
SHA512

d71e673de1dede596ecc1743d4ed21f3220dd0c4920aa2052877a089e73a00193f5331dc3576d0c5ce27833284e4557a111d80b332747cb1918b218ed1a6b014

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

876 AcroRd32.exe
876 AcroRd32.exe
876 AcroRd32.exe
876 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b1726e6d6f0dd0fb03edb0facfa4ec71d723388e974e8f4db2e08ce8dbaa67d3.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:876

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/876-54-0x0000000075901000-0x0000000075903000-memory.dmp

Filesize
8KB

Download