7de7f780b986c2d64162323e5c8d5d30f5d4076ea952808b95ac7a2085f4b6f7 | Triage

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
10-10-2022 08:46

Sharing

Report Analysis Logs

General

Target

CONVOCAZIONE - URGENTE.pdf
Size

384KB
MD5

0808e63f43330f0bb7ab01caccc88bbe
SHA1

e4c7cf43632d615651abf5ae6e1d6e096cd9864f
SHA256

7de7f780b986c2d64162323e5c8d5d30f5d4076ea952808b95ac7a2085f4b6f7
SHA512

11e9b789e2f2acfb7ad03012e30a6ae332ce2a60ab50712f1765356c87c6f9838740a28a6a7614b65565fc419fd30dcef6947e48fa9f695f63534433451ca5ce
SSDEEP

12288:Za8gRT9xDesmavFi6H1vBT/Y4YGNVsEWhfx/7:ZalRptesmavFPVZLY4FWhJ7

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1196 AcroRd32.exe
1196 AcroRd32.exe
1196 AcroRd32.exe
1196 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CONVOCAZIONE - URGENTE.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1196

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1196-54-0x0000000075D01000-0x0000000075D03000-memory.dmp

Filesize
8KB

Download