305fe9713d948af415d69dc10266be69a01ad917535eeaa97622c335864e563f | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 07:14

Sharing

Report Analysis Logs

General

Target

attachment20220806-3872-1jno1wk.pdf
Size

4.5MB
MD5

1c2a3e547c38e4c41adb8017919add49
SHA1

e075b8d62b9f31ff7b9083bc5bfaab47534382f6
SHA256

305fe9713d948af415d69dc10266be69a01ad917535eeaa97622c335864e563f
SHA512

804c6557682d4b05c69d3734ba93a85cfe31b70660beb3bc0cd4c4355ba78ac0e6a1ff29c96c80001b60743ab80f8bb3b59454f7b9022beb53737e4f5cd60079

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2008 AcroRd32.exe
2008 AcroRd32.exe
2008 AcroRd32.exe
2008 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-3872-1jno1wk.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2008-54-0x0000000075761000-0x0000000075763000-memory.dmp

Filesize
8KB

Download