a4bcf7b04d27ee71cf2e00488f98469ed8bec37171e80e54be60025a74645677 | Triage

Analysis

max time kernel
155s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07-09-2022 06:32

Sharing

Report Analysis Logs

General

Target

Release/Breeding Changes.pdf
Size

279KB
MD5

7542c2fe7ac9909c62776b8efddf6dfc
SHA1

87d324da4556e129800128065c5466e797a9d10d
SHA256

23899dee8bd2bc24141c9db947def76f1e1c82183c11d20fae6ec86130269a9d
SHA512

2f48444d3ec28e759203bf1d431291184c0ff8c03863533da58fb6d666535a3426bd0afe4fbe2c0f36c22151c05914070536c150831348b787a87e99d60eefab
SSDEEP

6144:oCNxRB2IrFbj1t9iRpMtopmyWPGjVDNiuWSHb1nD:LNLB1Rbj1uRpMtM1Wuj3iuWsD

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1976 AcroRd32.exe
1976 AcroRd32.exe
1976 AcroRd32.exe
1976 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Release\Breeding Changes.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1976

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1976-54-0x00000000762B1000-0x00000000762B3000-memory.dmp

Filesize
8KB

Download