4c323577de1efe8b49f04336fc4b7df81e11db834abdc6d7250f85659ff44491 | Triage

Analysis

max time kernel
150s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
18-10-2022 09:18

Sharing

Report Analysis Logs

General

Target

双语翻译版.pdf
Size

995KB
MD5

667a086b873c0353e413e659b166c9be
SHA1

3b0aca4651459e47e56f47c808426cec868360b0
SHA256

84fba99981eb9a4f4ec71f94f8f11fc586276ba4e98aaec2ac0457b76771ffdc
SHA512

9014918965b4c42ef248304723b9070f7fee27a683a5d1c8dfc57d1acc6385bafebe78e2727bb971d0c67999122bb91628628ac1104347aa321869768f4ad093
SSDEEP

24576:fEBrizR8VxGv1nohLjECVmWI4ycbdw2Tw2kJK:OraR8VcnoxEoicBws9x

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1464 AcroRd32.exe
1464 AcroRd32.exe
1464 AcroRd32.exe
1464 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\双语翻译版.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1464

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1464-54-0x0000000075B51000-0x0000000075B53000-memory.dmp

Filesize
8KB

Download