59e72551a4b46cc31a5b5ae55ca37d2a3a9393c787775c435b0c3e3dc4ba9081 | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
06-08-2022 07:06

Sharing

Report Analysis Logs

General

Target

attachment20220806-3021-2rl51z.pdf
Size

155KB
MD5

e4f7a4881be76fe1719d6f25caa15dc9
SHA1

76eefb0551db23bfcf2e4cfc63b379ebc7166de0
SHA256

59e72551a4b46cc31a5b5ae55ca37d2a3a9393c787775c435b0c3e3dc4ba9081
SHA512

adde627ab01007f97d98e5eea4e7b31b770b713d3e5a92d5b6bebc678e2968614db8cab3e7b6d51b9f79aac129cbdaa51f040854159fe54959ecf7d60a5b3abd

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1908 AcroRd32.exe
1908 AcroRd32.exe
1908 AcroRd32.exe
1908 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220806-3021-2rl51z.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1908-54-0x00000000749D1000-0x00000000749D3000-memory.dmp

Filesize
8KB

Download