514b9ba6376cb6d68720ee8dfb41e0dd3a4c731eb301f4a5457d04802d22ca39 | Triage

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-en-20211208
submitted
18-01-2022 07:56

Sharing

Report Analysis Logs

General

Target

7355d33d4de2fb0442af178a517762d5.pdf
Size

50KB
MD5

7355d33d4de2fb0442af178a517762d5
SHA1

ab57b5379ecbbd3159dbe77881d48cee8c239f83
SHA256

f120a1f15bd984600790c348e5868b6cae10618bb1d542d1630f555e371a51a0
SHA512

e08b7178670a49e02aa2d1c34af3a2e3eee4a35550bc43ba8460aa96db0f7ff137e105d491c2384bdd23b427257ba38007f281014d2a871bcbee881defb17bb6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

624 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

624 AcroRd32.exe
624 AcroRd32.exe
624 AcroRd32.exe
624 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7355d33d4de2fb0442af178a517762d5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:624

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/624-55-0x00000000758A1000-0x00000000758A3000-memory.dmp

Filesize
8KB

Download