0aef645502278865098799d78f40f6277121900cc1cd735739b737645d39a200 | Triage

Analysis

max time kernel
151s
max time network
50s
platform
windows7_x64
resource
win7-20220414-en
submitted
27-04-2022 10:04

Sharing

Report Analysis Logs

General

Target

WabtecPO.pdf
Size

11KB
MD5

f217cd7a0a30d3699ddabc6c2c684dfc
SHA1

3b0874033aa0f298b508bd29e08059ee5489065e
SHA256

7ef1d9e45fcd93a6361137aa634acda34f09552313b510e0f922399cdef0c4fd
SHA512

bdea49cd40486500c2dcde869c5adcc6d062a4f63510d2a307f31f52e74cabd77fd64c29be65b4faf8487764d3774ac328ab3fa0ee707f8cbf2aee368ddc1d19

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1640 AcroRd32.exe
1640 AcroRd32.exe
1640 AcroRd32.exe
1640 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\WabtecPO.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1640

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1640-54-0x0000000075801000-0x0000000075803000-memory.dmp

Filesize
8KB

Download