fbfbc78b2c47385a222e53ac5d24003155d73ca172f2967640f3541183c47d9a | Triage

Analysis

max time kernel
155s
max time network
138s
platform
windows7_x64
resource
win7-en-20211208
submitted
21-01-2022 22:50

Sharing

Report Analysis Logs

General

Target

fbfbc78b2c47385a222e53ac5d24003155d73ca172f2967640f3541183c47d9a.pdf
Size

67KB
MD5

a29c364348da95d46906a3cd97d5d812
SHA1

9ad312d7e13109329032a96116d496aa46528438
SHA256

fbfbc78b2c47385a222e53ac5d24003155d73ca172f2967640f3541183c47d9a
SHA512

003b2e1e892d41fdd63703b03a484db7bff83a3f25d0501c4392e5b39d7374d87f4271dd931856a4341610f4816cffef19e66305a231f819b7b72f143b5542be

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1632 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1632 AcroRd32.exe
1632 AcroRd32.exe
1632 AcroRd32.exe
1632 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fbfbc78b2c47385a222e53ac5d24003155d73ca172f2967640f3541183c47d9a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1632

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-55-0x00000000763F1000-0x00000000763F3000-memory.dmp

Filesize
8KB

Download