a1b2e555d2e370c141f02fd05fe12271b1256dd34464dd74ed0e308e978dfc00 | Triage

Resubmissions

05/12/2022, 19:24

221205-x4llqsha79 3

05/12/2022, 19:21

221205-x2v3dsbh2z 3

Analysis

max time kernel
159s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05/12/2022, 19:24

Sharing

Report Analysis Logs

General

Target

CMPCopyrightNotice.pdf
Size

2KB
MD5

437624ab07ac16409145d82b11c2b5fa
SHA1

553facb49e1881172df70f34762a29f843d48dc8
SHA256

f684887ea79872097f491959536cba11091bb733797571262b0d8841500a87bb
SHA512

8d5615e9d7fc7af832a65046fd98b6a20051ea27d94d432118d3a4f9ba360041371f3e18e2bd653b744e4ad451d5befed8ebf2d5d4c17945637c19d68175c50a

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1388	AcroRd32.exe
1388	AcroRd32.exe
1388	AcroRd32.exe
1388	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\CMPCopyrightNotice.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1388-54-0x00000000768A1000-0x00000000768A3000-memory.dmp

Filesize
8KB

Download