f9684bb1eed01dfc023ff42a405e9a6afe408c1cdc7f66936fd4d58a7047b01d | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
09-09-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 090922.pdf
Size

260KB
MD5

0009db691b99acdfa0c05b80ec4c41c4
SHA1

b9ce87610bf32e5359c42de1f3503180a431f7b8
SHA256

f9684bb1eed01dfc023ff42a405e9a6afe408c1cdc7f66936fd4d58a7047b01d
SHA512

0ef16ede78b8c68e63fb7574f481d04768887e164601c4d33c7d52c922b176eea54edaba347f35ddeb146c50b18c0388bbc14ad5dc7d9872a06be9fb2cae7465
SSDEEP

6144:muzgImeHFTWIj2Mzue+C2yMztNuf/evDAHqNJhM:muRmUV2MzuTCgztNumvDUqxM

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1280 AcroRd32.exe
1280 AcroRd32.exe
1280 AcroRd32.exe
1280 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 090922.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1280

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1280-54-0x0000000075811000-0x0000000075813000-memory.dmp

Filesize
8KB

Download