faaef4e4308f25ed168a50410c550e45526f1dff4569463cc57698e0c63040b6 | Triage

Analysis

max time kernel
150s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28-09-2022 06:53

Sharing

Report Analysis Logs

General

Target

COTIZACION DIGITAL 2022.pdf
Size

140KB
MD5

d2098829c4ad5927e104c30f36628ccd
SHA1

b0d566eed611d8170249a7c516070d308c4aae22
SHA256

faaef4e4308f25ed168a50410c550e45526f1dff4569463cc57698e0c63040b6
SHA512

45209ed7081e4772ed8fd0e472f6170b414af32e6c456d662a6d687e821b6e89f9c727f234d8429d6018aba563c033499391ee6e53a45fd02a01c2a06861826d
SSDEEP

3072:Tq2kP7ec4kXZgmAE5kH22H/lqBFgtWS5+6InTjq:XaLPXEE5w22QoTgFfq

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1848 AcroRd32.exe
1848 AcroRd32.exe
1848 AcroRd32.exe
1848 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\COTIZACION DIGITAL 2022.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1848

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1848-54-0x0000000076091000-0x0000000076093000-memory.dmp

Filesize
8KB

Download