e207d134e67daef0a78f1c3e638a4d668747199d6e58028f2acd49ff2f5938af | Triage

Analysis

max time kernel
150s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
26-10-2022 09:25

Sharing

Report Analysis Logs

General

Target

TexasImprovisedGrenades.pdf
Size

893KB
MD5

e0386028c8e181dd8b3d0d9131bb1a5d
SHA1

018def7c12be8b1052c35787d93d3ca0b19574ee
SHA256

e207d134e67daef0a78f1c3e638a4d668747199d6e58028f2acd49ff2f5938af
SHA512

e3d85297e8129356db92818334a82c5d97935410969999fdbb09f457ac7ba3bafc3c19c87c5dbafd0fb55a2d0935e68e3e4ad81826bce26f2299ed5137d9902b
SSDEEP

24576:yBfkK1FbRMmqXvhJjvpZ/wGW12rwr4APdjVHB:9K1YhXvh9fNg5B

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

536 AcroRd32.exe
536 AcroRd32.exe
536 AcroRd32.exe
536 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\TexasImprovisedGrenades.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:536

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/536-54-0x0000000075B11000-0x0000000075B13000-memory.dmp

Filesize
8KB

Download