a2adb32d2058d835639b4d5d7968206dcf3d06f5f8fafea49c20e6d857aa6e10 | Triage

Analysis

max time kernel
150s
max time network
47s
platform
windows7_x64
resource
win7-20220414-en
submitted
01-05-2022 19:33

Sharing

Report Analysis Logs

General

Target

discord-nitro-generator.pdf
Size

71KB
MD5

06ba36ec8ee62bc7e896b57c1b5377d4
SHA1

29e0415d16f52b4bf4f143e120a777233835ed2c
SHA256

a2adb32d2058d835639b4d5d7968206dcf3d06f5f8fafea49c20e6d857aa6e10
SHA512

e24516e5674967dab69e9457182bc0c491818eb3e74b782816cf436e191aba8f9bb833183715e114a86234a4643cb22c874cbb1debb73d8fe394d772b320cdf1

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

552 AcroRd32.exe
552 AcroRd32.exe
552 AcroRd32.exe
552 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\discord-nitro-generator.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:552

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/552-54-0x0000000075451000-0x0000000075453000-memory.dmp

Filesize
8KB

Download