bff9db5634b34ea8bd0300bae1c6efc01824c5f59050de5bbec163febbb5a930 | Triage

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-en-20211208
submitted
12-01-2022 13:15

Sharing

Report Analysis Logs

General

Target

Brochure.pdf
Size

1.2MB
MD5

8a639bda00bf6594c7260f09e287fe92
SHA1

7e916126542e018d3988ce8bda9afbbeddc289b3
SHA256

bff9db5634b34ea8bd0300bae1c6efc01824c5f59050de5bbec163febbb5a930
SHA512

b28b576e52ecb4b9714a92baf653100388b7e51c508ba061b537efa51bb442f51c8b7aeddc386eacf54c1c70ff8cf4a7b41000a8a31b3ff42fcebfb30e8c846d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1628 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1628 AcroRd32.exe
1628 AcroRd32.exe
1628 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Brochure.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1628

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1628-54-0x00000000751B1000-0x00000000751B3000-memory.dmp

Filesize
8KB

Download
memory/1628-55-0x00000000021C0000-0x0000000002236000-memory.dmp

Filesize
472KB

Download