ecfa58d5e634b455e20893c02d2341413debf4fd489a6c7272018a54dea6395c | Triage

Analysis

max time kernel
155s
max time network
43s
platform
windows7_x64
resource
win7-20220414-en
submitted
26-04-2022 13:51

Sharing

Report Analysis Logs

General

Target

882bc06802418236e688fd0757c1f2920ac63cb46ef81fc93c11f8515e7f88c7.pdf
Size

186KB
MD5

48efefe47670992171be1b231c86b98a
SHA1

98b22f7e804775f20a6a9fb580207086985dc891
SHA256

882bc06802418236e688fd0757c1f2920ac63cb46ef81fc93c11f8515e7f88c7
SHA512

382da79944a787fb1f83874c75e6216d62d79bbac716dcd86161e9c986ca504cb06cf3160613c4f9ad1442a72276b5db20231ccc7a734d62e6e7bb2c370dcfac

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1648 AcroRd32.exe
1648 AcroRd32.exe
1648 AcroRd32.exe
1648 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\882bc06802418236e688fd0757c1f2920ac63cb46ef81fc93c11f8515e7f88c7.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1648

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1648-54-0x00000000755B1000-0x00000000755B3000-memory.dmp

Filesize
8KB

Download
memory/1648-55-0x0000000002CB0000-0x0000000002D26000-memory.dmp

Filesize
472KB

Download