305fe9713d948af415d69dc10266be69a01ad917535eeaa97622c335864e563f | Triage

Analysis

max time kernel
151s
max time network
46s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 07:06

Sharing

Report Analysis Logs

General

Target

attachment20220806-3021-v4wbt0.pdf
Size

4.5MB
MD5

1c2a3e547c38e4c41adb8017919add49
SHA1

e075b8d62b9f31ff7b9083bc5bfaab47534382f6
SHA256

305fe9713d948af415d69dc10266be69a01ad917535eeaa97622c335864e563f
SHA512

804c6557682d4b05c69d3734ba93a85cfe31b70660beb3bc0cd4c4355ba78ac0e6a1ff29c96c80001b60743ab80f8bb3b59454f7b9022beb53737e4f5cd60079

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1492 AcroRd32.exe
1492 AcroRd32.exe
1492 AcroRd32.exe
1492 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-3021-v4wbt0.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1492-54-0x00000000750B1000-0x00000000750B3000-memory.dmp

Filesize
8KB

Download