f1feef1c385560a964aa32529e75dabc4a41893a0d098c37bb5b96598802a799 | Triage

Analysis

max time kernel
153s
max time network
119s
platform
windows7_x64
resource
win7-en-20211208
submitted
21-01-2022 22:53

Sharing

Report Analysis Logs

General

Target

f1feef1c385560a964aa32529e75dabc4a41893a0d098c37bb5b96598802a799.pdf
Size

64KB
MD5

aa4d1fc83ba4a668d90d723e6c96f60a
SHA1

d140ebce995ff2a212ca507e82195a9c5633ea11
SHA256

f1feef1c385560a964aa32529e75dabc4a41893a0d098c37bb5b96598802a799
SHA512

c524507ba9d623dcafc5b8bbec0a2d26477834d847bb344b0eec2500610e90d2ed0d4e665bc1a0618d8ce8dbe14da2c34e1238a62e23e431866714bdd464861c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1624 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1624 AcroRd32.exe
1624 AcroRd32.exe
1624 AcroRd32.exe
1624 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f1feef1c385560a964aa32529e75dabc4a41893a0d098c37bb5b96598802a799.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1624

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1624-55-0x0000000076641000-0x0000000076643000-memory.dmp

Filesize
8KB

Download