e0eea651c9e5e6476b0d65b56674f7c27ed6205d1a42a1f61926dd695247eed0 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-en-20211208
submitted
28-12-2021 06:14

Sharing

Report Analysis Logs

General

Target

fc41b6b3e61c29f7dd29d897def5bb78.pdf
Size

76KB
MD5

fc41b6b3e61c29f7dd29d897def5bb78
SHA1

e9d049bb45ea231956f0b36feb86a1c76fe9013f
SHA256

b85376517575bef31c6b8aaf29476560cf02674d8e40156803e52dbfb82ef50e
SHA512

aff42c3616e39ca6c0f022013fdfa15f4e68c8f15649cee327f94d85ae60d6577e1f4c1f17285233930884184468c33cc2d28d482054259fd28bb3f53fb8570f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1628 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1628 AcroRd32.exe
1628 AcroRd32.exe
1628 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc41b6b3e61c29f7dd29d897def5bb78.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1628

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1628-54-0x00000000751B1000-0x00000000751B3000-memory.dmp

Filesize
8KB

Download