4df973acc021693096a58db45236ff78617905f38fdbb0eaecfa39acc0eaecea | Triage

Analysis

max time kernel
150s
max time network
45s
platform
windows7_x64
resource
win7-20220414-en
submitted
05-05-2022 20:55

Sharing

Report Analysis Logs

General

Target

OneLegalOrder_17895443/Prop.pdf
Size

134KB
MD5

aab901484649eba45a65fbb400783970
SHA1

3edd534c23f724841b09c5f57d10d64651b1730f
SHA256

6295b3bd89dfeb550f8fead94eee1c88ed3f7a666c12c6d1125d8a74cdb17af0
SHA512

9c3dd2c07b644166ba4aaf94e49cf330bc738c08553a9719a76eab2cb1d56d5704cba6d830a1d374c407730b0607d8373220230059183c0ec97b197343e59008

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1380 AcroRd32.exe
1380 AcroRd32.exe
1380 AcroRd32.exe
1380 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\OneLegalOrder_17895443\Prop.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1380

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1380-54-0x0000000076C81000-0x0000000076C83000-memory.dmp

Filesize
8KB

Download