29381abe9d9f5403d8a5fc67f6b66d13ebb7056c96a2f7f249d27a3fe1caaf51 | Triage

Analysis

max time kernel
50s
max time network
43s
platform
windows7_x64
resource
win7-20220414-en
submitted
29-04-2022 04:27

Sharing

Report Analysis Logs

General

Target

INV-005229_2.pdf
Size

122KB
MD5

fcde4860a2aed0b17867689732f54516
SHA1

b728fe8d7e45ca64f3c68337b54f01749f3ed6d4
SHA256

29381abe9d9f5403d8a5fc67f6b66d13ebb7056c96a2f7f249d27a3fe1caaf51
SHA512

644a2f21456b9a86fc0f2904b6e6f26069630d2620fabdeb3b9731d534c8c6bc92fe97f61354c1888ddae3aa3f969f54389e9f1ec06356b78c140ca7c851ec87

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2016 AcroRd32.exe
2016 AcroRd32.exe
2016 AcroRd32.exe
2016 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\INV-005229_2.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2016

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2016-54-0x0000000075191000-0x0000000075193000-memory.dmp

Filesize
8KB

Download