8c24a7e1465b461afccec7776e6eab96de7ba3690817fb46dc7e4c8e22b3648c | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 07:02

Sharing

Report Analysis Logs

General

Target

attachment20220806-2490-a21yvp.pdf
Size

14KB
MD5

dafd80ae261beb6b4663488455bcdcb0
SHA1

6b093146d8e5a411ec643ec68b7bf6789d7f8c92
SHA256

8c24a7e1465b461afccec7776e6eab96de7ba3690817fb46dc7e4c8e22b3648c
SHA512

ab8c5320e34fe30f0f70cdc90681dd288fc756ae17d3596b8f9a38297b5e6758e2e4a9681306dbf0f30813a3a40e8de231be1ff6c56bbdbb30d48e10a2c9ea7c

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

600 AcroRd32.exe
600 AcroRd32.exe
600 AcroRd32.exe
600 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-2490-a21yvp.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/600-54-0x00000000756B1000-0x00000000756B3000-memory.dmp

Filesize
8KB

Download