dbb07ff758491a60c1dacd497f0d2aaa83e6d5cd01a89e75affca8a7124bebf5 | Triage

Analysis

max time kernel
145s
max time network
40s
platform
windows7_x64
resource
win7v200430
submitted
28-05-2020 21:54

Sharing

Report Analysis Logs

General

Target

Explanatory Handbook for GRF (2).pdf
Size

7.8MB
MD5

55b686dc11487d2b6f208a85e0ec9048
SHA1

e53afc9bbd880aff07ba21892fd686872d8dc416
SHA256

dbb07ff758491a60c1dacd497f0d2aaa83e6d5cd01a89e75affca8a7124bebf5
SHA512

d5dd97b07ed512f5e1aa3059fd88b4829aa409c056ec843c5571be9e38bc515c27f26670b6828a990dc2ef9066556e15c0512853c51c4e369aff4f93fcd70436

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1008 AcroRd32.exe
1008 AcroRd32.exe
1008 AcroRd32.exe
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1008 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Explanatory Handbook for GRF (2).pdf"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: GetForegroundWindowSpam
PID:1008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...