General
Target

attachment20220623-10971-1iqgenl.pdf

Filesize

1MB

Completed

23-06-2022 15:19

Task

behavioral1

Score
1/10
MD5

43d9f57d9ca4b5a4c7f7b68df1fd1bb2

SHA1

00a001cc6f33a368d6dc7410e03fda78f1200bd5

SHA256

7d59e0ae82e0e139693e3e703a0ba86ca6022c15b8a8c416e46467c9553b9a25

SHA512

29ca49ad8d0dd877b3afdc94cdfaeeb78246923ab16cd582b70429139528925a4176b99f5491984ec8500695df1c0ab4e9228beb9c70bb52bb0e54862be1d03f

Malware Config
Signatures 1

Filter: none

  • Suspicious use of SetWindowsHookEx
    AcroRd32.exe

    Reported IOCs

    pidprocess
    2032AcroRd32.exe
    2032AcroRd32.exe
    2032AcroRd32.exe
    2032AcroRd32.exe
Processes 1
  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220623-10971-1iqgenl.pdf"
    Suspicious use of SetWindowsHookEx
    PID:2032
Network
MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Replay Monitor
                          00:00 00:00
                          Downloads
                          • memory/2032-54-0x0000000075221000-0x0000000075223000-memory.dmp