4df973acc021693096a58db45236ff78617905f38fdbb0eaecfa39acc0eaecea | Triage

Analysis

max time kernel
170s
max time network
45s
platform
windows7_x64
resource
win7-20220414-en
submitted
05-05-2022 20:55

Sharing

Report Analysis Logs

General

Target

OneLegalOrder_17895443/Decl [under seal].pdf
Size

3.2MB
MD5

badde7944033cc63984e902d513d41bd
SHA1

8656a1a1d28716a19208ab4229cf18c70303a89c
SHA256

e34bdab9e960f7af9e1840350a19ea65d45f00b9fc753008c4eb84a7ad321e7d
SHA512

5c5cf0903fa89228436aa9eed76632c25fcba4ea5e1ae51b035053ce4609be23d2227a67b1b0434acfe59936bae43af2a6bb521cdbcee866df5b377b252950d6

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

864 AcroRd32.exe
864 AcroRd32.exe
864 AcroRd32.exe
864 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\OneLegalOrder_17895443\Decl [under seal].pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:864

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/864-54-0x00000000755A1000-0x00000000755A3000-memory.dmp

Filesize
8KB

Download