e017b1bc040c3256dc777cc1a471e8030e10d32dbfea2c483316e79c542a80ef | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
13-09-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 130922.pdf
Size

257KB
MD5

ed14e1e46b938208b7f20103190c4f71
SHA1

f1fac300f8fecf3c687912d9d38bacbe6383aa5a
SHA256

e017b1bc040c3256dc777cc1a471e8030e10d32dbfea2c483316e79c542a80ef
SHA512

78f09ef0f9c07347f1599d87981793aa6c935900fa86cf6bc99ed3aa8ec3f938b4b67233ca6fa8472ef36309f8353787db7eb8b567d90d7cf128aff88f3b8f68
SSDEEP

6144:2vU2urmuUOssMGWb0zLJ0zSSrsUW5zj60NJh7:2vUT5UzbYqSnj5a0x7

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1084 AcroRd32.exe
1084 AcroRd32.exe
1084 AcroRd32.exe
1084 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 130922.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1084

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1084-54-0x0000000074C91000-0x0000000074C93000-memory.dmp

Filesize
8KB

Download