49eb648367f9dbd5bef25fa06c1b19adfa7e2b4dbf7031500d80d2b20180f858 | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05-10-2022 13:25

Sharing

Report Analysis Logs

General

Target

bad2.pdf
Size

132KB
MD5

07ece96ee178c596769713becba15bab
SHA1

5723329957ac6bd15e6906d78eb5ecd11f271b0a
SHA256

49eb648367f9dbd5bef25fa06c1b19adfa7e2b4dbf7031500d80d2b20180f858
SHA512

840dcbd4e0a0f013b2365b9d0acddddcf4913f52ec6b2f821004902d3683145cbda0052f600930e7f56494904e4b478b9ca42f075c89aa53031b8dd6df9583b4
SSDEEP

3072:QfAzi6hg67oVWtBr7byXpKd5h9ejw+XGX3XcTuqIOZNYV:Qom6hgKoVWDriXIH0jw+XGX3XsjIO/w

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1100 AcroRd32.exe
1100 AcroRd32.exe
1100 AcroRd32.exe
1100 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bad2.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1100

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1100-54-0x00000000763F1000-0x00000000763F3000-memory.dmp

Filesize
8KB

Download