bd40446cefb17ece5431117c93540413b811dc7d1b51b2dc464c930f479c98da | Triage

Analysis

max time kernel
119s
max time network
118s
platform
windows7_x64
resource
win7-en-20211208
submitted
01-01-2022 04:32

Sharing

Report Analysis Logs

General

Target

0f4fa33318a3bb166a88b83d8b4d5bba.pdf
Size

39KB
MD5

0f4fa33318a3bb166a88b83d8b4d5bba
SHA1

32463436efeead9d6c560be51da88819e346d286
SHA256

1d0c8a2205740ebc5b8535f4fb067654a133101aa7f4cffe94f5a89e9f116511
SHA512

c50d0d8779181d25f7b447c144fc9676191898fa8d205ab09f52e7114dc950dd4bc80b87e6d1e6ebf602b76e14f98808f47c6127d26a547259e89003330f3525

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

480 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

480 AcroRd32.exe
480 AcroRd32.exe
480 AcroRd32.exe
480 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f4fa33318a3bb166a88b83d8b4d5bba.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:480

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/480-55-0x0000000074EC1000-0x0000000074EC3000-memory.dmp

Filesize
8KB

Download