55b83a18bfe96316e7b42c73e7aa9a69d0e0291e24125675b0d6bdc1c6637e79 | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 06:46

Sharing

Report Analysis Logs

General

Target

attachment20220806-32619-1cwk32i.pdf
Size

923KB
MD5

057db28df65f1fa9d409bdb8c64f791b
SHA1

3a76d912b9a8f3d539e59e994b6903539ac9822a
SHA256

55b83a18bfe96316e7b42c73e7aa9a69d0e0291e24125675b0d6bdc1c6637e79
SHA512

651b9ff3b5a60d2126ff0bf7fd61a2f634cabb631ccf28551763519f20551551efe7b90a6a746b86e0e0471413b2ca9353acdd6416ef86b17a890bea0cee1655

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

540 AcroRd32.exe
540 AcroRd32.exe
540 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-32619-1cwk32i.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/540-54-0x00000000758D1000-0x00000000758D3000-memory.dmp

Filesize
8KB

Download