f73fccc50cda7bc1f80239ec7c5bfaffdca7b62db4623c65944db32c938eefa9 | Triage

Analysis

max time kernel
264s
max time network
337s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
27-11-2022 02:55

Sharing

Report Analysis Logs

General

Target

ͬļ--豸/2.¼5 ̱.pdf
Size

34KB
MD5

9f0a6081e0d68d39a722ef206953ec52
SHA1

45a0fbd6d7ab01d1af594b0d0c44963c896ca89a
SHA256

814517c300d3eec88ac0780939098d64485eded2e69adeee8d220e4ae62c63b0
SHA512

d23759e75a287af40232f0866f4a29638459e1a6a3c691dbd72b7fd21c89a059ce252a1424f0a043b3b6bfd5125d4de7d6ebc41692a92b9836c758a760ff7af1
SSDEEP

768:lKwaNbv7xqBUvDh+OZtrjQ8r4RPpYseAWiMJD:INjlQUvljJYPmYMB

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1504 AcroRd32.exe
1504 AcroRd32.exe
1504 AcroRd32.exe
1504 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ͬļ--豸\2.¼5 ̱.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1504

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1504-54-0x00000000763A1000-0x00000000763A3000-memory.dmp

Filesize
8KB

Download