9bb893caa4592c051fe50aa772fd1fa55f0b14956945f8d9dd5a79d4a07c88bc | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 03:00

Sharing

Report Analysis Logs

General

Target

DTO 080922.pdf
Size

265KB
MD5

6ff2d260415a5c3655309efd9955206a
SHA1

3ed6da16dc436022997e5f0f7a948fb2130647d3
SHA256

9bb893caa4592c051fe50aa772fd1fa55f0b14956945f8d9dd5a79d4a07c88bc
SHA512

92376b82eea7bd0945f63a8db975d3d889e761c37d43b58433531b91c3e31a1a75b6bc8035635b970df775732c0d1f6d65bf1f5e5d199ee073e710ff9fcbebb4
SSDEEP

6144:bt15woxv921hvV5eICqSj+I5SXJz2f4wfNSxrygriBNJhj:bt15wQIvV5eICqSaI5SXp2f4ma+Bxj

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1488 AcroRd32.exe
1488 AcroRd32.exe
1488 AcroRd32.exe
1488 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 080922.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1488

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1488-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp

Filesize
8KB

Download