7c32f4d8951c017bf6cda7141d3b381e6056ed79d77b2335374b0f4b196640fa | Triage

Analysis

max time kernel
79s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
30-05-2022 19:38

Sharing

Report Analysis Logs

General

Target

FSGQ 011 - Eagle Translations - Apresentação.pdf
Size

191KB
MD5

18735589c6f156c795e2f8999d94a115
SHA1

69fe14c3eca291b7fef5005b32a8a52354598509
SHA256

7c32f4d8951c017bf6cda7141d3b381e6056ed79d77b2335374b0f4b196640fa
SHA512

2af4c85bb28015b1bab830274483f0696b989acf80a7435f92d59b1a884b827d29c050003088feb90a6e6c63c3b5f1de316c2490ce5be0854ab5aa08c41d0990

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1684 AcroRd32.exe
1684 AcroRd32.exe
1684 AcroRd32.exe
1684 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\FSGQ 011 - Eagle Translations - Apresentação.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1684

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1684-54-0x0000000074F91000-0x0000000074F93000-memory.dmp

Filesize
8KB

Download