Analysis

  • max time kernel
    150s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220718-en
  • resource tags
    arch:x64,  arch:x86,  image:win7-20220718-en,  locale:en-us,  os:windows7-x64,  system
  • submitted
    06-08-2022 05:56

General

  • Target

    attachment20220806-25946-ujwzds.pdf

  • Size

    29KB

  • Sample

    220806-gm5ehsdgd2

  • MD5

    5b390ebd772dc4bde198b92aaa0ea616

  • SHA1

    e6a1068e6e19afc9417c49bcb8e58213f5d8ad5d

  • SHA256

    6d3591e7b5d9b99baf5be21982837da5c31601389d807f12db98c3884803ac38

  • SHA512

    bb610b91fa4e6f0258a921fe953e17afd8e2e19ef38d1d3eceb6c8949ac3a150151bab90c651c94e113a849ac756b7f1e6bc3eb3f89c162b5cfa7d65f6c619d0

Score
1/10

Malware Config

Signatures 1

  • Suspicious use of SetWindowsHookEx ⋅ 4 IoCs

Processes 1

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-25946-ujwzds.pdf"
    Suspicious use of SetWindowsHookEx
    PID:1960

Network

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Replay Monitor

                          00:00 00:00

                          Downloads

                          • memory/1960-54-0x0000000075B61000-0x0000000075B63000-memory.dmp