db97c77518c68ce3db19da8f65e9f8dd8f9494fcbba59dddb0ed1796973f7e35 | Triage

Resubmissions

06-07-2022 14:19

220706-rmyl3sfgb7 3

06-07-2022 14:10

220706-rgy1nadfaj 3

Analysis

max time kernel
53s
max time network
44s
platform
windows7_x64
resource
win7-20220414-en
submitted
06-07-2022 14:10

Sharing

Report Analysis Logs

General

Target

Luciano Ramalho - Fluent Python_ Clear, Concise, and Effective Programming-O'Reilly Media (2022).pdf
Size

15.7MB
MD5

6b8f1e751c6d6b82a49cc155099f9949
SHA1

7d05f1c3f4c7a562889369bbc7ff2dad4122c725
SHA256

db97c77518c68ce3db19da8f65e9f8dd8f9494fcbba59dddb0ed1796973f7e35
SHA512

f66dd70e121285f7bc7ea7a0e9fda8b68d627eddfbf19899efb2c1f496d451b43489d41332f94f3d7b1774fec1d2f77dff885f689ac7dd56277962789d99c6e2

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1048 AcroRd32.exe
1048 AcroRd32.exe
1048 AcroRd32.exe
1048 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Luciano Ramalho - Fluent Python_ Clear, Concise, and Effective Programming-O'Reilly Media (2022).pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1048

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1048-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp

Filesize
8KB

Download