47cc557cdd57fe6a1b2dfe10d488681299ccb5b87dec604960c6c885d7284998 | Triage

Analysis

max time kernel
149s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
10-10-2022 15:39

Sharing

Report Analysis Logs

General

Target

ѧ/ʲôٻ.pdf
Size

220KB
MD5

9dae265d6aac7c5826a089faddfe14a9
SHA1

379b1575161b410160d522fb4fde79575b356dee
SHA256

7ea4733083864d68a86596c822e92e5793403c5062a35631806b61fe9fedc78b
SHA512

d5e34054a0fa7b5ab65e709c3bcdadfdbf40ebc18c82f362c2f4211ec01d3a5eedd47b2ed2307a4ef054b58bb8857e3df856bdc695353adfc5f590ec7cc5566d
SSDEEP

6144:ZCsz7YM3GNnn91+yKHkIX5Uu1Puy1wb17Mhrq:Rz7YMk3KkK5Uu1PHwb1wFq

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1048 AcroRd32.exe
1048 AcroRd32.exe
1048 AcroRd32.exe
1048 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ѧ\ʲôٻ.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1048

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1048-54-0x00000000759F1000-0x00000000759F3000-memory.dmp

Filesize
8KB

Download