4df973acc021693096a58db45236ff78617905f38fdbb0eaecfa39acc0eaecea | Triage

Analysis

max time kernel
84s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
05-05-2022 20:55

Sharing

Report Analysis Logs

General

Target

OneLegalOrder_17895443/Decl [redacted].pdf
Size

267KB
MD5

752524932eaee5883b5854843484f11b
SHA1

e58cbcdf3d855852413fd111b9f587be9fff54de
SHA256

cf5632e076beb1546ae3e3764a7823a00c1d0d6882ff1e631447741e5bc5db8d
SHA512

f17bf0fe684bfd51d3a31654cd621ff53a6c338bb7ae49f8740fc893161ae3797ce2abbef561f69fa171f649f1eca82eaabf2341edf4d2b68db728647f6b3151

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1652 AcroRd32.exe
1652 AcroRd32.exe
1652 AcroRd32.exe
1652 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\OneLegalOrder_17895443\Decl [redacted].pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1652

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1652-54-0x0000000076461000-0x0000000076463000-memory.dmp

Filesize
8KB

Download