54ad0446c41577df6cd6ad821de9fe3a6a18a0f703c6c0f0a5142ecb88770592 | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
14/09/2022, 11:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

09876560098.pdf
Size

870B
MD5

c8fef6aa70e440b6762dbc78bba8162b
SHA1

1ce3cccb8bd37db5f1a7115381c9e345f86863aa
SHA256

cf2cbbaf628c5fd91424d79f51931c6721e9cf036404c0b8a75b697f1f9cdd64
SHA512

6b7dafeac57c1a0081b29f958c12f97e3a36c78a6ca6ec6a4eca55f884232e3cab93b34cf42a441624411c14a82a95fb38de4a250de357bbd8b406c317ced85b

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
780	AcroRd32.exe
780	AcroRd32.exe
780	AcroRd32.exe
780	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09876560098.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/780-54-0x0000000076321000-0x0000000076323000-memory.dmp

Filesize
8KB

Download