c14bbd0508464cc55171b3a2ae1a7a6c16ca8b86c028eecfb5719751ecb09524 | Triage

Analysis

max time kernel
132s
max time network
44s
platform
windows7_x64
resource
win7-20220414-en
submitted
28-04-2022 07:58

Sharing

Report Analysis Logs

General

Target

CONVOCAZIONE-_1_.pdf
Size

338KB
MD5

9cff409cbbbc8e972a090d17fa0b8c7a
SHA1

3e0bc3380f7c5878f407bb485e46a5c239309943
SHA256

c14bbd0508464cc55171b3a2ae1a7a6c16ca8b86c028eecfb5719751ecb09524
SHA512

ebbb014656e48cfe4f9c6ea7d79239e5d4825ef36ff12a6dc687a37c197f3d8bff978e0ef85f28ef7a7a239ee3c8cbed167513b6c2e2f165f4b6ddaf11c54342

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 5 IoCs

Processes:

AcroRd32.exe

pid process

920 AcroRd32.exe
920 AcroRd32.exe
920 AcroRd32.exe
920 AcroRd32.exe
920 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CONVOCAZIONE-_1_.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:920

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/920-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp

Filesize
8KB

Download