Analysis
-
max time kernel
41s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
21/12/2022, 09:57
Behavioral task
behavioral1
Sample
ISF_Information Security Strategy_Transitioning from alignment to integration_Report.pdf
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ISF_Information Security Strategy_Transitioning from alignment to integration_Report.pdf
Resource
win10v2004-20220812-en
General
-
Target
ISF_Information Security Strategy_Transitioning from alignment to integration_Report.pdf
-
Size
3.6MB
-
MD5
ce965206da3caeaba48c507c794cfd66
-
SHA1
da6f62ab68f1c149e196531a70dab1bdab483609
-
SHA256
42f2763943869479444b2427858e4f8b803e7e80b8ef769ee35c803709b941e6
-
SHA512
fcbd3425b2696c5b6753d17bc6a69446447023f904c6296688a95e9f21e50791aeb873131fe2545acb585073c3b639b5dc8ddf9fb3d58f74d65b2c9ed57b65c5
-
SSDEEP
98304:hGinDdYwI+g4iRgIEC+2qjGEgBQxiVVTMza8:8iDdYMgXRgxggiV5Ka8
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ISF_Information Security Strategy_Transitioning from alignment to integration_Report.pdf"1⤵
- Suspicious use of SetWindowsHookEx
PID:1724