963d08d16a29cf91d4fb5057d70b6a5a63965a520a4569ecdffb3909ee9cd057 | Triage

Analysis

max time kernel
136s
max time network
47s
platform
windows7_x64
resource
win7-20220414-en
submitted
05-05-2022 12:59

Sharing

Report Analysis Logs

General

Target

Washington_Bluebook_Final.pdf
Size

243KB
MD5

2deb1b11fdef512b1288a9789c521bbc
SHA1

40ec783179d7af7397d4743fd48122fe344d54c3
SHA256

963d08d16a29cf91d4fb5057d70b6a5a63965a520a4569ecdffb3909ee9cd057
SHA512

b04f80cefbae5c9479fd496c57b4098d59b5de12e247eb8b468a082e3134f6c2679e8e59196b346134f37f647fdb68f230dedfcb8c339dcf2d14365995bd16b1

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2040 AcroRd32.exe
2040 AcroRd32.exe
2040 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Washington_Bluebook_Final.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2040

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2040-54-0x0000000076261000-0x0000000076263000-memory.dmp

Filesize
8KB

Download