8252357417c0d98d7c5f1fbd9aa7f4ded0b99466f1c41cbf00307e0e4b55f145 | Triage

Analysis

max time kernel
149s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
28-04-2022 15:50

Sharing

Report Analysis Logs

General

Target

Q1-2022-Global-Securities_USD_for-web.pdf
Size

484KB
MD5

253ce089f3d4f433cce0d7ab6efe3379
SHA1

bd1477613d1f962a2803b6c51d7e70b8eb13a1e8
SHA256

8252357417c0d98d7c5f1fbd9aa7f4ded0b99466f1c41cbf00307e0e4b55f145
SHA512

5f576cbf092be5feab0ee9635a6dce066e5c77c59b4768cd1a0e1dd7ff8ceee0621514e5c4db264f0cb909c1b90f0164f12aa043e270f6a5f2bf172131eb428f

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1856 AcroRd32.exe
1856 AcroRd32.exe
1856 AcroRd32.exe
1856 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Q1-2022-Global-Securities_USD_for-web.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1856

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1856-54-0x0000000075CE1000-0x0000000075CE3000-memory.dmp

Filesize
8KB

Download