3884f38ff5273fc57e48e4ccc70c4c5bc40110891ab197ea7c0766e75eba86a3 | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-09-2022 10:28

Sharing

Report Analysis Logs

General

Target

3班C类论文/A_18300750111_徐芷萱.pdf
Size

405KB
MD5

78b99fed3bb298c7875e3f4d223be5f0
SHA1

d7298760d7b6ec20c7b931dbab04a8b40f7e4905
SHA256

08e949dc437f779e361dabda7590da32b7fe0ac80d5c9cc25cbcf1c0c931bbc4
SHA512

ffdd049926969001468186e7d4b0b533fdeac2ebcd6416377bd47632904f2c6441a3c1d0cb030ce0cf8cac4bf6375ea05b7e3389c8ae071599d50bcbbe3f66ee
SSDEEP

12288:+l5sixiTo2D+MZUtBeKP7KzkZRUhJRQra:+TCToG+YUtBeKDKzkrUhJRQra

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1976 AcroRd32.exe
1976 AcroRd32.exe
1976 AcroRd32.exe
1976 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3班C类论文\A_18300750111_徐芷萱.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1976

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1976-54-0x0000000074AB1000-0x0000000074AB3000-memory.dmp

Filesize
8KB

Download