9e1dc58abf4381e7d62664a649e10f55ec0d8ad5565072e4747aa762f1f3f2b2 | Triage

Analysis

max time kernel
151s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-08-2022 13:28

Sharing

Report Analysis Logs

General

Target

CONVOCATORIA.pdf
Size

163KB
MD5

c4ce9f6b71fdd8767d1171a10c1da609
SHA1

0ae8504f316cd3553591d79c39ad7d3342ee04e9
SHA256

9e1dc58abf4381e7d62664a649e10f55ec0d8ad5565072e4747aa762f1f3f2b2
SHA512

dc6fe85ac83f31ab5f86a0e5aa8b96c1410927dac4c3ef92f094250842eaf7478d2809a646a32aee5c8c337e43ea3dc4de599c6b8e2671aaa064f76d26aa5ed5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1452 AcroRd32.exe
1452 AcroRd32.exe
1452 AcroRd32.exe
1452 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CONVOCATORIA.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1452

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1452-54-0x0000000075041000-0x0000000075043000-memory.dmp

Filesize
8KB

Download