ee8c46367596e91ab823d0d17b94ffd7094c1f513f4ca75936036f4980421276 | Triage

Analysis

max time kernel
152s
max time network
45s
platform
windows7_x64
resource
win7-20220414-en
submitted
21-05-2022 01:54

Sharing

Report Analysis Logs

General

Target

Quotation form.pdf
Size

139KB
MD5

0c1e75343142d64861a78788d219dbec
SHA1

fbf65394563d1260c3062fa3878235a946cd7a0f
SHA256

d971a4adac16461ee6a619d09f59b4f6219346efb5dfba456659abd02d50b295
SHA512

008f4fd22a75214983f14b5515d14c16c5dd400f1f8cb8daf74066a6aa59f0bf7478a0ca33a976988bfc48d821db0228ef5f5993ae6e45e9cfff68aacdd1a35b

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1704 AcroRd32.exe
1704 AcroRd32.exe
1704 AcroRd32.exe
1704 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Quotation form.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1704-54-0x0000000076241000-0x0000000076243000-memory.dmp

Filesize
8KB

Download