a2cb1bc45f9893eea8f3a539bb480b6b9cde2ff775c8aced3490de23eb10671f | Triage

Analysis

max time kernel
152s
max time network
50s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
21-09-2022 16:19

Sharing

Report Analysis Logs

General

Target

Policy Update/Policy.pdf
Size

287KB
MD5

f8f586a5b2cbde66bc38bfb1b5e39958
SHA1

6853735e97f1d07da40797e90ac18b675088dd9b
SHA256

841f11cd242d243010adb9477a13d569021297859c8963d044c8ae79e882b57a
SHA512

d699961793754b702c288bd494f5f2da3801d551ceccfda4681c988974b5fdd2e840070d3636f6e01bf05762d578b5914044669abc07f81772462fcd78e11a62
SSDEEP

6144:EU2sUs1ZZoC9O7HrA5b1DfdpumVx0ekWdva1k0vPx+PVQvP9m:J3UuZjO7HrAZxwQme9EkMx+3

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1396 AcroRd32.exe
1396 AcroRd32.exe
1396 AcroRd32.exe
1396 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Policy Update\Policy.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1396

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1396-54-0x00000000752B1000-0x00000000752B3000-memory.dmp

Filesize
8KB

Download