8bcc43a95f5b655693115d92bc44901a13d13a1ef80a8aee1caf256249aad81c | Triage

Analysis

max time kernel
150s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 09:24

Sharing

Report Analysis Logs

General

Target

0TKpbITb_851532.pdf
Size

273KB
MD5

4a4f66598040a14b2aab340426ab4960
SHA1

cc06263781d2d28f41cd261157ff0a61ea2c8f14
SHA256

8bcc43a95f5b655693115d92bc44901a13d13a1ef80a8aee1caf256249aad81c
SHA512

d7229e4bde3ac92eefb6e8ac34f902ac6dc9a5147c3203b9f685d8391f4822ff30182bb291e725fdbdb4db657d063d4134062db8f1c7fae5f05d0e70a55101a7
SSDEEP

6144:eJ+GwTeIfUTqg6xUDPD/OFx7vUBS0ZSlHZz6Ut4K5Smjwx:iBwTlfUT1DPD/OFx7vkS0YLzv+pcwx

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1724 AcroRd32.exe
1724 AcroRd32.exe
1724 AcroRd32.exe
1724 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0TKpbITb_851532.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1724

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1724-54-0x0000000074DC1000-0x0000000074DC3000-memory.dmp

Filesize
8KB

Download