4e819ce3e480e95936d843c4ab5e04516d5cda540414bb62d1015649ed36120d | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220331-en
submitted
08-04-2022 20:42

Sharing

Report Analysis Logs

General

Target

BgRT-WhitePaper.pdf
Size

310KB
MD5

84643b954e55cc2ee2219c2435c4f601
SHA1

be09bc116c95fe7387dbf9a65e8f8619332b17a7
SHA256

4e819ce3e480e95936d843c4ab5e04516d5cda540414bb62d1015649ed36120d
SHA512

c1ced474734d31b3ef3b01eee2c03dd1540d2f19fb9bcf8061dfefa8514b3865a7b3d98de00a034883dc69f92ca2329abec9d428a08f86a1a159712d0ecba2eb

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

AcroRd32.exe

pid process

1076 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1076 AcroRd32.exe
1076 AcroRd32.exe
1076 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\BgRT-WhitePaper.pdf"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:1076

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1076-54-0x00000000755F1000-0x00000000755F3000-memory.dmp

Filesize
8KB

Download