9970e067ca848c3771b455b41453ae6db42413cec4987ef4e09ad12e105d182d | Triage

Analysis

max time kernel
152s
max time network
43s
platform
windows7_x64
resource
win7-20220414-en
submitted
19-05-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 190522.pdf
Size

348KB
MD5

cd976419b7cf1ecca3648f60a5a5e1b6
SHA1

a10dbb9369a67b24249c996e1ebb399701c3fab1
SHA256

9970e067ca848c3771b455b41453ae6db42413cec4987ef4e09ad12e105d182d
SHA512

78f5ba140b96c1d608e32c76da0071d7848eefc5fc94c486d7e815ed938202300239a0e4fab690a305883d349a44508895beaacd7df09eb7d53e6f710895bab0

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1884 AcroRd32.exe
1884 AcroRd32.exe
1884 AcroRd32.exe
1884 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 190522.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1884

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1884-54-0x00000000759E1000-0x00000000759E3000-memory.dmp

Filesize
8KB

Download