73f566338cd3f9d3f7cfadcaa17ee17c0ce54c79f82da65077603f87c160e561 | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 06:18

Sharing

Report Analysis Logs

General

Target

attachment20220806-28922-1qev19j.pdf
Size

68KB
MD5

66a92fa020f2666a377e17ee190fed6c
SHA1

f4be42e2a7230b0df2691ea67da23dbd7340a220
SHA256

73f566338cd3f9d3f7cfadcaa17ee17c0ce54c79f82da65077603f87c160e561
SHA512

5b5c67298fe763fb5aff9b34a2094c0944900114dd28e8b9c0dfc641a5944ce762799d7ddc792d6d6c10b46a6b3435b27de58799ca4fef5e89eeb1a9785bdcea

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

860 AcroRd32.exe
860 AcroRd32.exe
860 AcroRd32.exe
860 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-28922-1qev19j.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/860-54-0x0000000076681000-0x0000000076683000-memory.dmp

Filesize
8KB

Download