cfaf0a949a71ada54af11b81354abb914a0bc8500de9836cb568b011abda1e6b | Triage

Analysis

max time kernel
175s
max time network
50s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
21-10-2022 16:05

Sharing

Report Analysis Logs

General

Target

1試務公告/111試務公告.pdf
Size

124KB
MD5

723adedc38fc458a17aa3ed695b4b5ca
SHA1

70e874a678b45b5a7a0846a097fa69ddde9fbf0e
SHA256

c8da65780c0e1e280becbae5f09e832116b8b1041912381a593276ebe8a8ca83
SHA512

9b462c3a6342c6e88c2a0736eebb1fe3ca9c7ac29dcdc81d2d565d2bb4e9040eec85ce1769a01ab646da88d9ee3d0fa3c34b356bc98b52e50539001ebe82bd15
SSDEEP

3072:dWbof4zeUjgNZxfkvPSy1pJpvmq29pVaU6x:QeUofk31Fuq8pYf

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

944 AcroRd32.exe
944 AcroRd32.exe
944 AcroRd32.exe
944 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1試務公告\111試務公告.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:944

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/944-54-0x0000000074E41000-0x0000000074E43000-memory.dmp

Filesize
8KB

Download