8f5c37abd7fc3f49369cde53128d668a7578691e9ff9afad40e9b589124d0ecf | Triage

Analysis

max time kernel
87s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20-09-2022 08:07

Sharing

Report Analysis Logs

General

Target

POL945785SE.pdf
Size

306KB
MD5

0fa2ac3b3043a18a2898fc111712334a
SHA1

b4ba308df961c8f69d60d6af53cebba59ed1a832
SHA256

8f5c37abd7fc3f49369cde53128d668a7578691e9ff9afad40e9b589124d0ecf
SHA512

3d7ad70e454181f8213ef310771c810541ed1f07a80be7a217604c851bd7cd201b57492627d542de78ed286d698f3f00c277be7dc7955113857ed5da8a2dbb17
SSDEEP

6144:HOzaDyB9Vc2pr94ljp2WsnXCNdCItziUAtdmny6y1Ll:Ho6yBDc2pr94VkWsnXQsaziBtENy9l

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1472 AcroRd32.exe
1472 AcroRd32.exe
1472 AcroRd32.exe
1472 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\POL945785SE.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1472-54-0x0000000074D61000-0x0000000074D63000-memory.dmp

Filesize
8KB

Download