64b878aa5bcc89de17d022c779d8a36db4fe5d4c86b31ad6008dc66bb97d9652 | Triage

Analysis

max time kernel
81s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
20-09-2022 19:46

Sharing

Report Analysis Logs

General

Target

DDJJ-27937038.pdf
Size

75KB
MD5

e5617fecea7342d94df53c119b827653
SHA1

2284b9f6b99c89505dae812e54f39f9517f1f36c
SHA256

1e8ce91e2d720d72a87e74cd6ebe22978bfdc21be0a9af3c8ad31afaecbaac22
SHA512

74ef755817347397d7f453af700398798651a170562e9c80137f3d5dc36124d702e1d6cdc30371ec3c64aafdd8f51da35e28e1d1fba285d88eff491b58b93f9d
SSDEEP

1536:jpX6i/s9mkqZRoyMJBjrWbw0WbvfeMDYq2iF/wzb:jVscffVMVAMIiBwzb

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1720 AcroRd32.exe
1720 AcroRd32.exe
1720 AcroRd32.exe
1720 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DDJJ-27937038.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1720

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1720-54-0x00000000757A1000-0x00000000757A3000-memory.dmp

Filesize
8KB

Download