41356dbd3899b8de9f9b0bff176a17a0c6b9e89409ff390fbaf7eba4d9f175bb | Triage

Analysis

max time kernel
172s
max time network
47s
platform
windows7_x64
resource
win7-20220414-en
submitted
20-05-2022 12:46

Sharing

Report Analysis Logs

General

Target

41356dbd3899b8de9f9b0bff176a17a0c6b9e89409ff390fbaf7eba4d9f175bb.pdf
Size

482KB
MD5

5755dce255abb114e6d626d9b30e0fa4
SHA1

af5ce62bfcff9a88b20be403e22b24aac40f3f5f
SHA256

41356dbd3899b8de9f9b0bff176a17a0c6b9e89409ff390fbaf7eba4d9f175bb
SHA512

e2e9d9b1280ebf0365b1b2fc4efd7036e18b6113527ceea4b3ad4e26f74683111be8965f1e1a119634bc1668c7548c322c6998bb06effc640300812e837549fb

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1904 AcroRd32.exe
1904 AcroRd32.exe
1904 AcroRd32.exe
1904 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\41356dbd3899b8de9f9b0bff176a17a0c6b9e89409ff390fbaf7eba4d9f175bb.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1904

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1904-54-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

Filesize
8KB

Download