4f146e2a76c1befd792fb00ed88019bd30e0c3974a38a57cb0a063b1a7660164 | Triage

Analysis

max time kernel
152s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20-10-2022 07:03

Sharing

Report Analysis Logs

General

Target

课时7/练习7/练习7要求.pdf
Size

589KB
MD5

e9fc1127fbd0b9e350df802f4409a5a2
SHA1

8685badcccb2a08cb9101b4675c9f72ec7e97350
SHA256

77bac327fc68e3cd636e64f378ef8051b4fb339fcad021a0ecea7c9870bd8f1e
SHA512

eed740aefbe7dfad8246cfc6223e5d3c1a1a4e93e699b278394527fa6f06fd5ee6fff7d4e27681e3adbd713347c38a651f33b6ede045169ca68564ce9602a354
SSDEEP

12288:eJcvPrZAz6/C9wMTKNjMz8j+QAaddMux4JRw/ZvO1ZX0:scHyH9vclQux4OvME

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2020 AcroRd32.exe
2020 AcroRd32.exe
2020 AcroRd32.exe
2020 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\课时7\练习7\练习7要求.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2020

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-54-0x0000000075451000-0x0000000075453000-memory.dmp

Filesize
8KB

Download