4beb397ea49948dfead829e3744ade15310b7b55d44dfcd17001924f23e107e3 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-en-20211104
submitted
03-12-2021 13:43

Sharing

Report Analysis Logs

General

Target

2021-2022 DOL BID PROCEDURE.pdf
Size

332KB
MD5

0e3612118f3398baa0096f45db420a89
SHA1

31cfb490faab1d20fd22a7f8de5075d2514f756b
SHA256

4beb397ea49948dfead829e3744ade15310b7b55d44dfcd17001924f23e107e3
SHA512

6f043285c0a7a6ab4bbb4d4f3dd482647d66b6dd65ffea606d3b6ec1c8410feef4f08020e993f28186a6d777f06349813b3cc3db04ea635e8d48fc2ea8597188

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1644 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1644 AcroRd32.exe
1644 AcroRd32.exe
1644 AcroRd32.exe
1644 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2021-2022 DOL BID PROCEDURE.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1644

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1644-55-0x00000000760C1000-0x00000000760C3000-memory.dmp

Filesize
8KB

Download