f73fccc50cda7bc1f80239ec7c5bfaffdca7b62db4623c65944db32c938eefa9 | Triage

Analysis

max time kernel
151s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
27-11-2022 02:55

Sharing

Report Analysis Logs

General

Target

ͬļ--豸/2.¼4 ˵.pdf
Size

116KB
MD5

ac0b7ff8ccc804e4a64ad0fb6ef2ddfb
SHA1

056e78842ced91a7fa631c1ad1dcc9bef9b73779
SHA256

78db2841a1003c339e57da35274da3f3b15a1901675f78ba39d6465759074b80
SHA512

acc26b969a8e5edb0ba2f4f70933a3310640cb28da881a098e2c6670bb71bd0d4dfea56095206ceb81da24ca9eb9e605d3f130f8d89da5ac96bdea8e5c318fe6
SSDEEP

3072:FhN2jwkPTIUf/m6G9eelGbpl7xPCoFdCEC5J:ViwITRXuPUplNCr

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1732 AcroRd32.exe
1732 AcroRd32.exe
1732 AcroRd32.exe
1732 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ͬļ--豸\2.¼4 ˵.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1732

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1732-54-0x0000000075771000-0x0000000075773000-memory.dmp

Filesize
8KB

Download