55b83a18bfe96316e7b42c73e7aa9a69d0e0291e24125675b0d6bdc1c6637e79 | Triage

Analysis

max time kernel
44s
max time network
48s
platform
windows7_x64
resource
win7-20220715-en
resource tags

arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 07:14

Sharing

Report Analysis Logs

General

Target

attachment20220806-3872-gj78va.pdf
Size

923KB
MD5

057db28df65f1fa9d409bdb8c64f791b
SHA1

3a76d912b9a8f3d539e59e994b6903539ac9822a
SHA256

55b83a18bfe96316e7b42c73e7aa9a69d0e0291e24125675b0d6bdc1c6637e79
SHA512

651b9ff3b5a60d2126ff0bf7fd61a2f634cabb631ccf28551763519f20551551efe7b90a6a746b86e0e0471413b2ca9353acdd6416ef86b17a890bea0cee1655

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1672 AcroRd32.exe
1672 AcroRd32.exe
1672 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-3872-gj78va.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1672-54-0x00000000762B1000-0x00000000762B3000-memory.dmp

Filesize
8KB

Download