3090ed30ea68bdbe777ad9d695f053aafc3529bb2854debcc0ff278a3ac783b5 | Triage

Analysis

max time kernel
150s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07-09-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 070922.pdf
Size

259KB
MD5

5b9c45d66693883cfb578f9894376edb
SHA1

ddd1366e4d98220dc06336cf04c09db5325f3aa1
SHA256

3090ed30ea68bdbe777ad9d695f053aafc3529bb2854debcc0ff278a3ac783b5
SHA512

ffa9130f3fdc1d6202b6a7c361ffb8bd5642852dfeb5f6b64118842d191a98957a09b337f0ccbe5a2f838efb9d0e9efec042974ec18468c44f3d001bb4e75fb9
SSDEEP

6144:TXXyt+GBa+Q42ZrbrWC7pzoLxD6kxrygrinNJhv:TXXys42pN7+LEM+nxv

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1424 AcroRd32.exe
1424 AcroRd32.exe
1424 AcroRd32.exe
1424 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 070922.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1424

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1424-54-0x0000000076151000-0x0000000076153000-memory.dmp

Filesize
8KB

Download