c72289d015d5661eea3043a76d53c92e72b164527468a3b547fd3e8585fc1cdd | Triage

Analysis

max time kernel
181s
max time network
48s
platform
windows7_x64
resource
win7-20220414-en
submitted
20-05-2022 07:03

Sharing

Report Analysis Logs

General

Target

DOCS/Custom Booter.pdf
Size

106KB
MD5

68eb5eaa3dc70d237bf4263a1e81cf97
SHA1

5a5412c14675b9194152ae5ed08aab5c034076ee
SHA256

89d2f44e9551d82b468d4b3d0edb2d61c7eb3672abd6954783640e6b9b48a1eb
SHA512

2f7e67efc99a3d2690be75373af7102a6b42aa0504686e5a9a5d1e2365e1ce678413783e85ec7ed3126c04877fe77003ea29f5297c7daf04544d1c2d263c0f41

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1464 AcroRd32.exe
1464 AcroRd32.exe
1464 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DOCS\Custom Booter.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1464

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1464-54-0x0000000075501000-0x0000000075503000-memory.dmp

Filesize
8KB

Download