974e9928b7a53e20a948a9271efc2119d31ceabb9737918566cd73dbb7d9f407 | Triage

Analysis

max time kernel
48s
max time network
44s
platform
windows7_x64
resource
win7-20220414-en
submitted
19-04-2022 17:05

Sharing

Report Analysis Logs

General

Target

2022-04-19-quote-QTE-00001.pdf
Size

149KB
MD5

f880b79fab994438193dc7a236c37d78
SHA1

54cea35182b7ba5bc1d0bc6d0bb6cb80cc24edba
SHA256

974e9928b7a53e20a948a9271efc2119d31ceabb9737918566cd73dbb7d9f407
SHA512

941b620e1f1f5fc65059fde4287679c2c139947347b8c9e8e1f49fe9cdabdc201be35b9c4bc889538dbce6c43189e82a4a303b364c77ce23cc5fae5b62ec216e

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1120 AcroRd32.exe
1120 AcroRd32.exe
1120 AcroRd32.exe
1120 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2022-04-19-quote-QTE-00001.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1120

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1120-54-0x00000000753B1000-0x00000000753B3000-memory.dmp

Filesize
8KB

Download