762264c9ee166c9035acf65637aa7e86ebde4d3695712575b7fde6c2be711a9b | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220331-en
submitted
07-04-2022 16:27

Sharing

Report Analysis Logs

General

Target

2022-04-06 NOF to Helmerich & Payne International Drilling.pdf
Size

100KB
MD5

064ba387179095d31380cd87334e88a4
SHA1

6ab11b84303b0c27327ec01b311531db3f3753e8
SHA256

762264c9ee166c9035acf65637aa7e86ebde4d3695712575b7fde6c2be711a9b
SHA512

eb1c302e2f59fd4583fce89d5b0788cc36e6c3e33501c467efb89391f5ff207196eda6f94c53ec11d2085e95e9dcb68ecb792625339deea94755f2245b1e5472

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1820 AcroRd32.exe
1820 AcroRd32.exe
1820 AcroRd32.exe
1820 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2022-04-06 NOF to Helmerich & Payne International Drilling.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1820

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1820-54-0x0000000076641000-0x0000000076643000-memory.dmp

Filesize
8KB

Download