54fc8526741a27a5b261717496ee8db6c4f1fc096b9ebe220a8dcb3d56faff2c | Triage

Analysis

max time kernel
4294180s
max time network
122s
platform
windows7_x64
resource
win7-20220311-en
submitted
22-03-2022 08:00

Sharing

Report Analysis Logs

General

Target

Red Cross Odessa (Ukraine) help request.pdf
Size

118KB
MD5

80c45d910f0a46571a3fe6e1e97a466b
SHA1

937cd33c45219a2513e4a19c7626e8780fc064d4
SHA256

54fc8526741a27a5b261717496ee8db6c4f1fc096b9ebe220a8dcb3d56faff2c
SHA512

9fb569906f69708943b9d044850c8b662229c201c8f73df0f4ed1ad4102afb1d54094439ed4da49a6efdf090c5cd09e6c3cbc989acb2e19aa8e830ba04cd9f98

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1392 AcroRd32.exe
1392 AcroRd32.exe
1392 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Red Cross Odessa (Ukraine) help request.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1392

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1392-54-0x0000000075471000-0x0000000075473000-memory.dmp

Filesize
8KB

Download