b5c58499192841c023ae66b3c9d718641465c72678820e0ba06407060526c8d5 | Triage

Analysis

max time kernel
53s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
09-09-2022 13:22

Sharing

Report Analysis Logs

General

Target

PDFPDF.pdf
Size

78KB
MD5

ec652d4abb55e051067e0e29f2028484
SHA1

db106be48fb3fc4b9f6de640c5ac00e1a10b484a
SHA256

b5c58499192841c023ae66b3c9d718641465c72678820e0ba06407060526c8d5
SHA512

f70b767adb1c2d323de4bfa94f425755c0381d73a2cfa811797e37d991b8a6101e274a4845fdd5106a92ee7c0924b3f8261d95dd8dc232aa7f94e7e0c465edc0
SSDEEP

1536:mWsthTF+EA2qHnhs0sUW1llxbYWs6qrryuWKZlrkhQo:xsthTF+EAVna050lJYWsyuWKZBu

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1680 AcroRd32.exe
1680 AcroRd32.exe
1680 AcroRd32.exe
1680 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PDFPDF.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1680

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1680-54-0x0000000075281000-0x0000000075283000-memory.dmp

Filesize
8KB

Download