541b13a04aa6108f1779b2c39d111151861d19ea64ea8b21a3c656a3f9b91e63 | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220414-en
submitted
02-05-2022 19:36

Sharing

Report Analysis Logs

General

Target

541b13a04aa6108f1779b2c39d111151861d19ea64ea8b21a3c656a3f9b91e63.pdf
Size

44KB
MD5

2fed408d0445a7d33591c1de5e82e128
SHA1

a709e28b2b51eb26c9011ea7b76132cf8f8a3a8f
SHA256

541b13a04aa6108f1779b2c39d111151861d19ea64ea8b21a3c656a3f9b91e63
SHA512

5030227a7fde67454cf1f4174fb9a3c579a76a1bcc062b5e12d3bfdecc8abf74b59b2caefa6db8b85db1bcf96bbe180b727ab0565229770b687804fff76d98d7

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1548 AcroRd32.exe
1548 AcroRd32.exe
1548 AcroRd32.exe
1548 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\541b13a04aa6108f1779b2c39d111151861d19ea64ea8b21a3c656a3f9b91e63.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1548

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1548-54-0x00000000759E1000-0x00000000759E3000-memory.dmp

Filesize
8KB

Download