f844c9fab690a446dbc04b1db846e45d3eef351cfd4859d296f345011a31255d | Triage

Analysis

max time kernel
157s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
24-05-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 240522.pdf
Size

346KB
MD5

a2facbb2948c61b45703cd8b1c77f005
SHA1

89790c620b9edafcf23e135564b5e480f7d2c5e8
SHA256

f844c9fab690a446dbc04b1db846e45d3eef351cfd4859d296f345011a31255d
SHA512

bf4d17df166d3dbf214f0d2dab4db094bdd0779c9b27f08dc981f434ea05f8774ee9f9c6110d22c9f70c7e4f9daa749d9f1515bb17db4898dfd5f47fcff28a50

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1344 AcroRd32.exe
1344 AcroRd32.exe
1344 AcroRd32.exe
1344 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 240522.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1344

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1344-54-0x0000000074F21000-0x0000000074F23000-memory.dmp

Filesize
8KB

Download