Analysis
-
max time kernel
43s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
12-09-2022 11:08
Behavioral task
behavioral1
Sample
Crafting the InfoSec Playbook Security Monitoring and Incident Response Master Plan (Jeff Bollinger,.pdf
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Crafting the InfoSec Playbook Security Monitoring and Incident Response Master Plan (Jeff Bollinger,.pdf
Resource
win10v2004-20220812-en
General
-
Target
Crafting the InfoSec Playbook Security Monitoring and Incident Response Master Plan (Jeff Bollinger,.pdf
-
Size
10.5MB
-
MD5
c24a98216b489d2172bf0070048f8598
-
SHA1
870d1fce6bc5e97788ffc4c6ae5e915d013c550e
-
SHA256
7d326481a8ede83bb4a5abeb8ef968a9e62ddc6434c77dd373c2a2ed0cecf82f
-
SHA512
e2380b2009995c16942d4d70a00fb3f194260c9b69c00241da7fdb91f746289f2534de01741047357c58548320673c8ffe7cf58eb2fcba461251cd6ae2a73772
-
SSDEEP
196608:RxFHxSY/zQmX4vRv0Nj5q+v9e7jjJIs7cJ2BvsiGIxcIjnRBB3p0p9L:LSsQmIZvwjvY73JIs4/iGWcIzpZkL
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1652 AcroRd32.exe 1652 AcroRd32.exe 1652 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Crafting the InfoSec Playbook Security Monitoring and Incident Response Master Plan (Jeff Bollinger,.pdf"1⤵
- Suspicious use of SetWindowsHookEx
PID:1652