3d406cc2b3b4c891e625be3cebc8f292f326b055b0a91b91eefaa5309d1f22fc | Triage

Analysis

max time kernel
61s
max time network
45s
platform
windows7_x64
resource
win7-20220331-en
submitted
11-04-2022 14:06

Sharing

Report Analysis Logs

General

Target

8472 FACTURA VENCIDA.pdf
Size

50KB
MD5

0233481f9b41ca24ccd800c8aedb08f6
SHA1

80945e31146553c0bae85cd9e79784d5e714861a
SHA256

249ec1b071699e9d72a4249a3ffa89b8f6591d0f21159a541587c3ceab82b5c5
SHA512

d3abc2a0ba24cbe62300bfa4e5daef6483b2975475a3d08b597b4b242d3169dfa000dc9321c81cc6eb1e6cf687a75efa78788932b6e5fd0ca7edac64ae290d77

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1932 AcroRd32.exe
1932 AcroRd32.exe
1932 AcroRd32.exe
1932 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8472 FACTURA VENCIDA.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1932

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1932-54-0x0000000075E41000-0x0000000075E43000-memory.dmp

Filesize
8KB

Download