40e7b79bc0b3bbf0cfcdec48a69edeb002905ba67ef950fbad7b19cd4679d70f | Triage

Analysis

max time kernel
122s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
20-09-2022 04:18

Sharing

Report Analysis Logs

General

Target

Complete Details.pdf
Size

164KB
MD5

1776a311f34ba8e2494c54d8b8016e28
SHA1

371f0b5c2b2fddec88e463efaa4958a17689ff51
SHA256

40e7b79bc0b3bbf0cfcdec48a69edeb002905ba67ef950fbad7b19cd4679d70f
SHA512

a2c998b2ac663cef9a19d2b57b9af5916d08bafa5cebb14a55ca376626fb41d45ed271e3a4ef4ccc6e09e0fb2b223474f388a6ea350e999775e94b11020e3742
SSDEEP

3072:8yujbniSdNSOGuOLCRvbAjWD14z1A1KlJOoXCkvCNSfi7pYTqeFtcr:AuuO+CwK1AMflykvCNSUKWp

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

620 AcroRd32.exe
620 AcroRd32.exe
620 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Complete Details.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:620

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/620-54-0x0000000075711000-0x0000000075713000-memory.dmp

Filesize
8KB

Download