Analysis

  • max time kernel
    151s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06-09-2022 14:28

General

  • Target

    attachment20220906-17465-12pfz2a.pdf

  • Size

    65KB

  • MD5

    978d45a613cf8da08b49a0adbdb9edc7

  • SHA1

    481b4ed9c69715aac7f9a54f3f6d3d7ebef6b2a0

  • SHA256

    4f4aaae444fdda658bb8609f4eabd836aa8131e8d0283d81ea5b5ad9bcd723d5

  • SHA512

    e6a2747f6d4cfd927551d0e1e744e980a84ab49f213d0fc0f4cdd3f23f5c21db03fdc4e5c0c35a62a2d93a71f47c586f8dbbe9f8e2fb5377976fc9ce73530369

  • SSDEEP

    1536:S5J7nxqZWXAYV0zZp4bTVNEnhN9n/rT6OBeXlDrilb9+uASPG:SP7nYZJc0qNEnJf6OBeHilb9+ue

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220906-17465-12pfz2a.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1400-54-0x0000000075571000-0x0000000075573000-memory.dmp

    Filesize

    8KB