98b9117c06e8f40057e9d9d1fc86d3bfdac8c9f336e78b0ac93f85f198fd7403 | Triage

Analysis

max time kernel
150s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
09-05-2022 18:17

Sharing

Report Analysis Logs

General

Target

Tecno - May 6 2022 - Modbus_MQTT_ROUTE_.pdf
Size

139KB
MD5

469b7956db9ab5f772913d2415868b2c
SHA1

a5cb10662bb54ba30712955c8568bbaa7bd6c5c0
SHA256

98b9117c06e8f40057e9d9d1fc86d3bfdac8c9f336e78b0ac93f85f198fd7403
SHA512

a47822821737910e0b258b0744aa2cd9140b82aa13cdc381a4c6a8a4241678bac28b2c46693128c0fa64427d54184f7efd759fc50d15e8b8acc1c977ad8136c6

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1092 AcroRd32.exe
1092 AcroRd32.exe
1092 AcroRd32.exe
1092 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Tecno - May 6 2022 - Modbus_MQTT_ROUTE_.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1092

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1092-54-0x00000000752A1000-0x00000000752A3000-memory.dmp

Filesize
8KB

Download