46490934b17474453a0caf5bbbe8eabe6ea11a99f6c450065cf6b47a67918454 | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220414-en
submitted
26-04-2022 09:00

Sharing

Report Analysis Logs

General

Target

OCBC Weekly ESG report 20220426.pdf
Size

435KB
MD5

e517d4cb0c5c3fc5673cfeea0e27d080
SHA1

7ac96e527d0e2c6b8a6afc3c76ee73fdfdab3577
SHA256

46490934b17474453a0caf5bbbe8eabe6ea11a99f6c450065cf6b47a67918454
SHA512

396b051440cd7baeb8b6def437d609b86852b15ccb9027b6c90b981157adf7feb49ed20b72615bcf2ba63900ee51ec0d6ff5d3090d4576d9368eda30529bf7df

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

812 AcroRd32.exe
812 AcroRd32.exe
812 AcroRd32.exe
812 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\OCBC Weekly ESG report 20220426.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:812

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/812-54-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

Filesize
8KB

Download