e8e1af3431f3c68376cbd507bf8b4f7a5c0d88ce9ba92408e8fffba8f68cacc2 | Triage

Analysis

max time kernel
153s
max time network
118s
platform
windows7_x64
resource
win7-en-20211208
submitted
21-01-2022 22:56

Sharing

Report Analysis Logs

General

Target

e8e1af3431f3c68376cbd507bf8b4f7a5c0d88ce9ba92408e8fffba8f68cacc2.pdf
Size

410KB
MD5

a0dde5b89b3ac08a01555794d5b04ad5
SHA1

a2033af1079eb4deaeffdf5dd7bc86cffb1cb98b
SHA256

e8e1af3431f3c68376cbd507bf8b4f7a5c0d88ce9ba92408e8fffba8f68cacc2
SHA512

ef6f8206df183041a959b415f3992579b72830b2db5fe14d936595491252f26ff7b1c413ab8e133677561876f4054ca2c90da792f1f800edaa833e1878860d95

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

892 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

892 AcroRd32.exe
892 AcroRd32.exe
892 AcroRd32.exe
892 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e8e1af3431f3c68376cbd507bf8b4f7a5c0d88ce9ba92408e8fffba8f68cacc2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:892

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/892-54-0x0000000076451000-0x0000000076453000-memory.dmp

Filesize
8KB

Download