3eaa9f4c98b168639e48c087b451a4b59fced9c33b98b1252a52798638b39038 | Triage

Analysis

max time kernel
70s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08-10-2022 17:21

Sharing

Report Analysis Logs

General

Target

Book_1.pdf
Size

7.4MB
MD5

a5783732d4374f11ac2da0fb7a9ea5f6
SHA1

54345ac363c42934c51d8e1d52bbc6b836121e0e
SHA256

3eaa9f4c98b168639e48c087b451a4b59fced9c33b98b1252a52798638b39038
SHA512

6c95382593baa6908eef14907679b369decd57c7b038fcbe2b8f4dc8adf5d4ffba0a1f2af2f1023f80b645cfefcc9bc4df3518030acbf790106e0b34ccf0fdf4
SSDEEP

196608:mXykovkbrd1D9mZxTfb8CU+THIjHujxLPLY1mdX:mXmo51BuxUCUljULYg

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1052 AcroRd32.exe
1052 AcroRd32.exe
1052 AcroRd32.exe
1052 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Book_1.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1052

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1052-54-0x0000000075931000-0x0000000075933000-memory.dmp

Filesize
8KB

Download