Analysis

  • max time kernel
    55s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    13-09-2022 17:51

General

  • Target

    Tracy Raskow via DocuSign.pdf

  • Size

    13KB

  • MD5

    95cbb0482e96083462f1d4d60d40dffa

  • SHA1

    44a19ec36e6f3071e492f3645824a58f78f45de6

  • SHA256

    d31f3b32258154b0252dd9f595066cd2890a263985b4cb781606e0bfea9aaab1

  • SHA512

    794c1d6e49b846edde5d6d84abccd6afdf33169dfb76d654b41e49aab5ffd74c7b4ece4c36f317ef42b096941ed75849eaef10142e9a36c1fd61d448d2a5608a

  • SSDEEP

    192:1LKjs5TZrff3mGnA/pzZmJIVZ2MhpxxDYrmxfkm7+dqXEgurCm4QAMiLgSZ7P:1LlTZrX3mQsgmDhJDASEgDQDiLgSZz

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Tracy Raskow via DocuSign.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1672-54-0x0000000075111000-0x0000000075113000-memory.dmp

    Filesize

    8KB