e8c2c5b0c5bf3a53fe906898b065f8441d886793ff719f670bee84cd5faa65ec | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20-09-2022 14:14

Sharing

Report Analysis Logs

General

Target

f_00c87e.pdf
Size

2.2MB
MD5

79741caed62a4031925b0f47b791820b
SHA1

7d63b93d981158967ca6893af36e86d48e905f0d
SHA256

b2e3559e24626ce939655d08309ae71363dd46c6318155d0e5bda61c9623457e
SHA512

5b65a4b122098b204c60abe1debabc27e24ffc23d8306de5bec837d5dd6f95bbbb26be6ed4d1d627a876eed7cb91a5cf1b0f0b1863848b3a669d1d0cb604311c
SSDEEP

49152:YeRlF+yqDHPDGXRY5ch6VtKGelXP9Co+384nWq:DF+yqD+EHKHP9bL4l

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1896 AcroRd32.exe
1896 AcroRd32.exe
1896 AcroRd32.exe
1896 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f_00c87e.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1896

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1896-54-0x0000000075201000-0x0000000075203000-memory.dmp

Filesize
8KB

Download