f75c05f6665436f502930c678d2de3e603a6660868255cbf7c604b0dffb4f6b8 | Triage

Analysis

max time kernel
151s
max time network
50s
platform
windows7_x64
resource
win7-20220414-en
submitted
30-05-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 300522.pdf
Size

345KB
MD5

5bd52de6b5a452cd4813803fcf8029c2
SHA1

dc977fc33084006373a523f6ff2548bf8c596cd6
SHA256

f75c05f6665436f502930c678d2de3e603a6660868255cbf7c604b0dffb4f6b8
SHA512

4a68f3b5953b522f4cc6167018d0140040c26ad89bf4a96a14b4fbb97c0a5545b6940075417c0611b751bf7302e808b30ca4f266180167f3210fa1a30a02855d

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

892 AcroRd32.exe
892 AcroRd32.exe
892 AcroRd32.exe
892 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 300522.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:892

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/892-54-0x00000000763B1000-0x00000000763B3000-memory.dmp

Filesize
8KB

Download