c7c300124c7b0f49d9a177b316c8d63f96723c708ede6c934f37fb1054bade52 | Triage

Analysis

max time kernel
149s
max time network
151s
platform
windows7_x64
resource
win7-en-20210920
submitted
25-10-2021 14:08

Sharing

Report Analysis Logs

General

Target

c7c300124c7b0f49d9a177b316c8d63f96723c708ede6c934f37fb1054bade52.pdf
Size

74KB
MD5

a85b36227ac27df36325be394d4cc027
SHA1

35a4430678bfdd1ffb2085c9c70441c963a487a8
SHA256

c7c300124c7b0f49d9a177b316c8d63f96723c708ede6c934f37fb1054bade52
SHA512

c656e9e67224e7349f53034d8d3037818b527fd1ba13e7f5782e70fa1168bfa842510b46048bc3110d7513ac3531f4020f891c5824befbcaa90091ee5e342ed8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

320 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

320 AcroRd32.exe
320 AcroRd32.exe
320 AcroRd32.exe
320 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c7c300124c7b0f49d9a177b316c8d63f96723c708ede6c934f37fb1054bade52.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:320

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/320-54-0x00000000757B1000-0x00000000757B3000-memory.dmp

Filesize
8KB

Download