bf924afc7196ef65f562652cc8a3c363ebab8d79628ad0cc0946e379d2575af1 | Triage

Analysis

max time kernel
151s
max time network
45s
platform
windows7_x64
resource
win7-20220414-en
submitted
20-05-2022 12:59

Sharing

Report Analysis Logs

General

Target

bf924afc7196ef65f562652cc8a3c363ebab8d79628ad0cc0946e379d2575af1.pdf
Size

2.9MB
MD5

e46da3ceae04c9bbca8aba52ef205541
SHA1

778f27208abd3d08a9192fb954fb73a8dbff31b9
SHA256

bf924afc7196ef65f562652cc8a3c363ebab8d79628ad0cc0946e379d2575af1
SHA512

9c5affdce8b64025d1e9ce3a2e33c815ea0c809fcef10df27c473c48c864b2e808355efec6b8f0abde93e5772724dc70dfb9428433e42b64e6cfed41b4bd02b6

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1864 AcroRd32.exe
1864 AcroRd32.exe
1864 AcroRd32.exe
1864 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bf924afc7196ef65f562652cc8a3c363ebab8d79628ad0cc0946e379d2575af1.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1864

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1864-54-0x0000000075A61000-0x0000000075A63000-memory.dmp

Filesize
8KB

Download