a4bcf7b04d27ee71cf2e00488f98469ed8bec37171e80e54be60025a74645677 | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07-09-2022 06:32

Sharing

Report Analysis Logs

General

Target

Release/Pokemon Changes.pdf
Size

2.0MB
MD5

c4a6d44706ec323d136fa879aa7a6130
SHA1

79acfc0bf2ed7a7692b41bfdd238f4d97a4c1302
SHA256

25e57e06deb0e1eb477b2b41af2f6cd562492fe3ef9ef06a3708dd3eb50bbe81
SHA512

58d79d6c78cf8abcf0ff7595af2132bba80d53464f1f0dc02084525b2121d7bc89967e1df954a5f1681b6b0041a12a9cbb853a501d1b71eea4dd329b5bda9ac4
SSDEEP

49152:wv1gdp/oq5CcSyFRbbGk/g4R9fNlpyM9m6ONee:w9gdpQqCryF5ffNlpyM0ee

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1896 AcroRd32.exe
1896 AcroRd32.exe
1896 AcroRd32.exe
1896 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Release\Pokemon Changes.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1896

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1896-54-0x00000000763F1000-0x00000000763F3000-memory.dmp

Filesize
8KB

Download