Analysis

  • max time kernel
    151s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    06-09-2022 12:40

General

  • Target

    attachment20220906-2874-1ckh8j4.pdf

  • Size

    68KB

  • MD5

    66a92fa020f2666a377e17ee190fed6c

  • SHA1

    f4be42e2a7230b0df2691ea67da23dbd7340a220

  • SHA256

    73f566338cd3f9d3f7cfadcaa17ee17c0ce54c79f82da65077603f87c160e561

  • SHA512

    5b5c67298fe763fb5aff9b34a2094c0944900114dd28e8b9c0dfc641a5944ce762799d7ddc792d6d6c10b46a6b3435b27de58799ca4fef5e89eeb1a9785bdcea

  • SSDEEP

    1536:Q/rhfcEfe9TEerjF3PkEFD+BQaU9eprptaWihxXhHJ3Ms8eFEV0yxpKxQd:gOj9TpfRPk2DentMhZhHJ8s84veZd

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220906-2874-1ckh8j4.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/620-54-0x0000000075711000-0x0000000075713000-memory.dmp

    Filesize

    8KB