12f592c23114f965b36354a65c4dce1fdfb6b2bd56f4e9cce6667f9523125722 | Triage

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-en-20211208
submitted
10-12-2021 09:28

Sharing

Report Analysis Logs

General

Target

2f7c6e5fda750265c601817bb9ceb93e.pdf
Size

294KB
MD5

2f7c6e5fda750265c601817bb9ceb93e
SHA1

d27cdba90ee7c529046ac330d57b4643bef4a7eb
SHA256

88041c9011b287e006e4d6abb4f6cf879d56c8a363163b0edebaed6b85c43279
SHA512

c887666618fe7000b6ee709c1b23dff89811b0adad3ce7897c1cabf7261e6984e1a0f7c815856e370450863f70952a758e5a08c4f561463c93964c8c81eb96cd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

944 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

944 AcroRd32.exe
944 AcroRd32.exe
944 AcroRd32.exe
944 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2f7c6e5fda750265c601817bb9ceb93e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:944

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/944-54-0x0000000076151000-0x0000000076153000-memory.dmp

Filesize
8KB

Download