7aa930c018a7e3693401270a16d8189addfc9e100df858efe11756c8eda5101d | Triage

Analysis

max time kernel
150s
max time network
122s
platform
windows7_x64
resource
win7-en-20211208
submitted
07-01-2022 09:00

Sharing

Report Analysis Logs

General

Target

Expert Call - Enablers of EV transition in India - Mr. Prashant Radhakrishnan.pdf
Size

549KB
MD5

ef28d1be2ec4301bf24648d72f61e258
SHA1

68a37cd025bf2950682fefa50c6d9b7b1ee479ec
SHA256

7aa930c018a7e3693401270a16d8189addfc9e100df858efe11756c8eda5101d
SHA512

183241bc9a9d6e2b164fd8dac3079182b4be8bfb6bc2e06336df4682bc0f2a120842b33d3b9eb5acb77ca670d625e9a74b1fe6a7f895128a542356a9df78303d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

960 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

960 AcroRd32.exe
960 AcroRd32.exe
960 AcroRd32.exe
960 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Expert Call - Enablers of EV transition in India - Mr. Prashant Radhakrishnan.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:960

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/960-54-0x0000000076151000-0x0000000076153000-memory.dmp

Filesize
8KB

Download