98690746508a3d4417a50d5c39f3e778d902781da397486c2163eeaf47cab9dd | Triage

Analysis

max time kernel
153s
max time network
47s
platform
windows7_x64
resource
win7-20220414-en
submitted
25-05-2022 02:03

Sharing

Report Analysis Logs

General

Target

DTO 250522.pdf
Size

348KB
MD5

4547b0d643123d52b4cd66d8da03fe1b
SHA1

e4a726328e93f54bb66e550f79616c1cbd4dcff5
SHA256

98690746508a3d4417a50d5c39f3e778d902781da397486c2163eeaf47cab9dd
SHA512

97a7ace299302e324d5549eb21afdec10670c7d57b8e359622fa52646bf99241cfecc6b24cd5c9553599f1273c7158cbb23c1cd5317815b6d705b4b877405880

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1824 AcroRd32.exe
1824 AcroRd32.exe
1824 AcroRd32.exe
1824 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 250522.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1824

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1824-54-0x0000000076C81000-0x0000000076C83000-memory.dmp

Filesize
8KB

Download