a4bcf7b04d27ee71cf2e00488f98469ed8bec37171e80e54be60025a74645677 | Triage

Analysis

max time kernel
151s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07-09-2022 06:32

Sharing

Report Analysis Logs

General

Target

Release/Training Guide.pdf
Size

279KB
MD5

6593ea2940df5a80d03321ffb85a1121
SHA1

c9019a20fcad30f07cf5be770e62ecc9473797f6
SHA256

b43e705adba425cfdae7cb95c51bbffe3a1c1930b935b5d353b1a88ef39ae83b
SHA512

25e080299fddf3c985841098549700d09b930041644d3fcce6c1ed9ea39dfb11c5f49dea7c3c0f8d71cd3363d4f3729cfbfc8f379515cec36f12f97b5f970f14
SSDEEP

6144:ONxRB2IrFbj1t9ehRsUEqmYl+CZW9XUcbam5Z:ONLB1Rbj1ihRsjMo95aE

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1644 AcroRd32.exe
1644 AcroRd32.exe
1644 AcroRd32.exe
1644 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Release\Training Guide.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1644

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1644-54-0x0000000075A11000-0x0000000075A13000-memory.dmp

Filesize
8KB

Download