cfaf0a949a71ada54af11b81354abb914a0bc8500de9836cb568b011abda1e6b | Triage

Analysis

max time kernel
171s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
21-10-2022 16:05

Sharing

Report Analysis Logs

General

Target

3簡章附表/3報名表-A4副表.pdf
Size

141KB
MD5

6aac2b1e58cc3d7e2b0c13172df4c4b7
SHA1

8b2f37d361123d40dc87bbb3599484194e301a7b
SHA256

6fd265b16eb8980c86c3ba6f68a0cdd9292bf46afbd467e9ebe02607f958145a
SHA512

1a09f7b508dc34cae0884dee03a3ea7a9bac68fd77736a9b2e912d7858c5c1bf5c55fa56cb71443872dbd37acf762ef4f2a19c2aabf19b0097829a2fd359d2db
SSDEEP

3072:WjrFMVJYQQ9NFk/isH+R3myQvFl639SwcQNK:WjrF9QmbsH+5MvFUcQNK

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1956 AcroRd32.exe
1956 AcroRd32.exe
1956 AcroRd32.exe
1956 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3簡章附表\3報名表-A4副表.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1956

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1956-54-0x0000000074C11000-0x0000000074C13000-memory.dmp

Filesize
8KB

Download