57778ec09072f2d041b7688df1dad4adbd4d062ab7cd49c398b8aa06cccfff74 | Triage

Analysis

max time kernel
150s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
09-10-2022 23:37

Sharing

Report Analysis Logs

General

Target

TC ZWRP - PSG W-wa 2022.10.01.pdf
Size

499KB
MD5

68cf79c2a7059f6be317efcd306cd5cb
SHA1

39ead3ea79927092dec6870136fbaa7f22fea4ea
SHA256

57778ec09072f2d041b7688df1dad4adbd4d062ab7cd49c398b8aa06cccfff74
SHA512

441697975ddba02e273f6549b65b946b94808930956149dae65562c8f308ee9a9f081aec9cf082ac63c4b28b8e8087c9c2c24441ef27ff70b375db821668a0c7
SSDEEP

12288:ejSzWSJoe/PSzWxrigbsBLYeLfa9ZYEaPE:eCEe27LNa9ZYJM

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1536 AcroRd32.exe
1536 AcroRd32.exe
1536 AcroRd32.exe
1536 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\TC ZWRP - PSG W-wa 2022.10.01.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1536

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1536-54-0x0000000075681000-0x0000000075683000-memory.dmp

Filesize
8KB

Download