62e660917d773752c82281a2520f930956b147505b4721cb6891dbc946f016c4 | Triage

Analysis

max time kernel
119s
max time network
118s
platform
windows7_x64
resource
win7-en-20211208
submitted
12-01-2022 12:24

Sharing

Report Analysis Logs

General

Target

b21f1f89ef4c74eb1ee6d4a6a7ded5d2.pdf
Size

37KB
MD5

b21f1f89ef4c74eb1ee6d4a6a7ded5d2
SHA1

6fd553f1ea2cce8ef1f4682be5f059e4988ce0ac
SHA256

bd20ee1bb708bb715cc8bb4c4e8b4a4362e1c5b3b7c2b05f64159107342d9f9d
SHA512

ba07684e0cc704fc0e8f783bbe790758f11ab8e22af677c8dd31b12938b1841e8790ae64b29235420a401f7354cd037f615b306aa68046c4e545acf6451e3c8b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1724 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1724 AcroRd32.exe
1724 AcroRd32.exe
1724 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b21f1f89ef4c74eb1ee6d4a6a7ded5d2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1724-54-0x0000000076491000-0x0000000076493000-memory.dmp

Filesize
8KB

Download