183e3d4dd573b8ebee051ffe728f63896eb3c290e876d0abd0c4cdc8f678ffee | Triage

Analysis

max time kernel
44s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 22:05

Sharing

Report Analysis Logs

General

Target

RR Line Booklet-compressed.pdf
Size

13.6MB
MD5

e892138deb295d57adfd81358f4c1d76
SHA1

4be8acd4d434a2b8e26225651f8733460a1425a1
SHA256

183e3d4dd573b8ebee051ffe728f63896eb3c290e876d0abd0c4cdc8f678ffee
SHA512

822611615b18d1c66e0f691cb6c22bda7f0b147f5bc754b5d90e6ab24d0fea5ba4e66fe9c05fae07911bc32305e83076b5ad4b7b2af69f0db29461e05b511173
SSDEEP

393216:+IA1cBGYYvjmq8TsJ1jnpXvjN9U4or33Qf:/+IxYC/TAhq44C

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1184 AcroRd32.exe
1184 AcroRd32.exe
1184 AcroRd32.exe
1184 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\RR Line Booklet-compressed.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1184

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1184-54-0x0000000075211000-0x0000000075213000-memory.dmp

Filesize
8KB

Download