73f566338cd3f9d3f7cfadcaa17ee17c0ce54c79f82da65077603f87c160e561 | Triage

Analysis

max time kernel
152s
max time network
42s
platform
windows7_x64
resource
win7-20220715-en
resource tags

arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 07:06

Sharing

Report Analysis Logs

General

Target

attachment20220806-3021-1ffsxf8.pdf
Size

68KB
MD5

66a92fa020f2666a377e17ee190fed6c
SHA1

f4be42e2a7230b0df2691ea67da23dbd7340a220
SHA256

73f566338cd3f9d3f7cfadcaa17ee17c0ce54c79f82da65077603f87c160e561
SHA512

5b5c67298fe763fb5aff9b34a2094c0944900114dd28e8b9c0dfc641a5944ce762799d7ddc792d6d6c10b46a6b3435b27de58799ca4fef5e89eeb1a9785bdcea

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1908 AcroRd32.exe
1908 AcroRd32.exe
1908 AcroRd32.exe
1908 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-3021-1ffsxf8.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1908-54-0x00000000754D1000-0x00000000754D3000-memory.dmp

Filesize
8KB

Download