Analysis

  • max time kernel
    150s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    18-05-2022 03:03

General

  • Target

    DTO 180522.pdf

  • Size

    340KB

  • MD5

    81cf65872d292024db54f2e99d1d3bfc

  • SHA1

    cbcabfa46373ce2bfd440b1aae3a3f4612c74b43

  • SHA256

    b001b7e0e15b1698ba365ca8b686177065c653d3cf78ee5dcb4e6468e188e361

  • SHA512

    a11016d48bb49d1818d87ea9268cd403768db1bafa1b9bb45a1e280e5325309fc728e1af91066f05ad342fe2844321bb2c46112d69aa9d80bc0adf70f309bae2

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 180522.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2036-54-0x0000000075721000-0x0000000075723000-memory.dmp
    Filesize

    8KB