8cf90dc5508d5a8d20f93c125ea38a8a8c39a5bd6f4769f816b3832de1cc11ad | Triage

Analysis

max time kernel
151s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
02-05-2022 19:26

Sharing

Report Analysis Logs

General

Target

8cf90dc5508d5a8d20f93c125ea38a8a8c39a5bd6f4769f816b3832de1cc11ad.pdf
Size

42KB
MD5

ac3f185c7880514deb829960f4dbbe6f
SHA1

34dff8a55566f987b0a3cbf88ed06f7a8532af14
SHA256

8cf90dc5508d5a8d20f93c125ea38a8a8c39a5bd6f4769f816b3832de1cc11ad
SHA512

8b5b8893b431cc1a2fe1fcd5a067f47e2358e811a63d5eb2031166130f9a939c4e6bbb9efdae01bf01d06dc29c3939ab50ac20b2131da8e81c734bea486ad82f

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

920 AcroRd32.exe
920 AcroRd32.exe
920 AcroRd32.exe
920 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8cf90dc5508d5a8d20f93c125ea38a8a8c39a5bd6f4769f816b3832de1cc11ad.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:920

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/920-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp

Filesize
8KB

Download