4459f7eac498cb42ef46cab1f76b543f99f5c2c8cf354dd51fcbee61bbe622e8 | Triage

Analysis

max time kernel
153s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
10-05-2022 05:36

Sharing

Report Analysis Logs

General

Target

Supply Chain Agenda.pdf
Size

1.6MB
MD5

1082597094f172b9190fc6f27edd6071
SHA1

dc914329a23f930a1ae06842fbbc8c79dcd429d8
SHA256

4459f7eac498cb42ef46cab1f76b543f99f5c2c8cf354dd51fcbee61bbe622e8
SHA512

91669c0184f8836b70b123d77f9dacc004b324a7a64d7bd5c2067d8cf0c2e54fa9614778d4b89e41730642e3a35848f52c5d02a52c3c9ec4cc80def2e45b476a

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1656 AcroRd32.exe
1656 AcroRd32.exe
1656 AcroRd32.exe
1656 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Supply Chain Agenda.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1656

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1656-54-0x0000000075361000-0x0000000075363000-memory.dmp

Filesize
8KB

Download