9260e06e528a73f0eb4087b373b2abffe07a4906e4c39a0c9eabf754a68a0795 | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
21-09-2022 14:37

Sharing

Report Analysis Logs

General

Target

RöD.pdf
Size

1.3MB
MD5

9cc3f5e052bd9c63a3a36020dc808a1c
SHA1

14ed7d21daa7ca93d6493fcbdf804e2de507c052
SHA256

9260e06e528a73f0eb4087b373b2abffe07a4906e4c39a0c9eabf754a68a0795
SHA512

f29615f43e2f1e59a371638d360da2c356c70ff493e9db6a5b39cad87cfe8455cac2ff8c459218eca871787a5ddacdd30ada3828cce84760601306afd37f5e38
SSDEEP

24576:cLflX3Eo1GTU4Ob9+461kjDcDjBFT0BnsIzcgNIfuEs+5uiZAbpznBuksJzzo18q:66K6O41kHsX6SuD

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1648	AcroRd32.exe
1648	AcroRd32.exe
1648	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\RöD.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1648-54-0x0000000075811000-0x0000000075813000-memory.dmp

Filesize
8KB

Download