02c7025995e6bd45494542a11f115d2184da85936c5b78ed1cce26c0ea1c65be | Triage

Analysis

max time kernel
45s
max time network
49s
platform
windows7_x64
resource
win7-20220414-en
submitted
05-05-2022 13:16

Sharing

Report Analysis Logs

General

Target

ProofPoint_Documentation_SecureEmail_ExternalUser_August2021.pdf
Size

742KB
MD5

0403aa858f5e5fec5be3f315706e69ca
SHA1

24459d583f1cd33643ca64d43c7485fc220c9ce1
SHA256

02c7025995e6bd45494542a11f115d2184da85936c5b78ed1cce26c0ea1c65be
SHA512

20f143d9baee8d126c061de386f0163af38b4b2102c9883c24798df62928a50c9c813258ed2037bda20ed4fa95a60f368176bd7ba3138afc74cd31aec0973d24

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1092 AcroRd32.exe
1092 AcroRd32.exe
1092 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ProofPoint_Documentation_SecureEmail_ExternalUser_August2021.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1092

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1092-54-0x0000000076571000-0x0000000076573000-memory.dmp

Filesize
8KB

Download