3dcf0ea7e6ef5a0f2821405e273346621812e3ad9e85d4686084c8eb24d0d7c8 | Triage

Analysis

max time kernel
152s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-09-2022 10:33

Sharing

Report Analysis Logs

General

Target

Discrete Math Book.pdf
Size

35.0MB
MD5

57a3cbe95c769f07e5aa01bb60210ac4
SHA1

d2c16d574ee12e4f5642337f912e87dbe92ccde0
SHA256

3dcf0ea7e6ef5a0f2821405e273346621812e3ad9e85d4686084c8eb24d0d7c8
SHA512

26584cbc2e33ce14954bb578ba4abe972f9f1ba08b63478c248e65eefb74975491586754cb6903f94145d30bcb5a5b99509b0b7640ca9d1d93dd661285687dac
SSDEEP

393216:ZCYg1lrV6FVX+6Tw7+wewONrEU7R8Y5BAWF2nLy:ZCz2X+6Tw9HONf7XoWce

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1744 AcroRd32.exe
1744 AcroRd32.exe
1744 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Discrete Math Book.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1744-54-0x0000000076DC1000-0x0000000076DC3000-memory.dmp

Filesize
8KB

Download
memory/1744-55-0x0000000000F00000-0x0000000000F76000-memory.dmp

Filesize
472KB

Download