78c02913c8655b31c69c35d510ea9d925421964b56d225ae9e6704e5cd7b5e6d | Triage

Analysis

max time kernel
154s
max time network
121s
platform
windows7_x64
resource
win7-en-20211208
submitted
21-01-2022 23:39

Sharing

Report Analysis Logs

General

Target

78c02913c8655b31c69c35d510ea9d925421964b56d225ae9e6704e5cd7b5e6d.pdf
Size

67KB
MD5

f22dd67bcd7aa0c59e841fa912fee583
SHA1

31445505b74163e8581e912ffb5d2783023784fa
SHA256

78c02913c8655b31c69c35d510ea9d925421964b56d225ae9e6704e5cd7b5e6d
SHA512

e521b7dfeb7a9fce8d418736b176ef05f251e2087c0075bc753714e39d080c418d0bcbd4b8fdee28c9d27559995f7cb6789924b95732eb40be3d24b31101e7cb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1452 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1452 AcroRd32.exe
1452 AcroRd32.exe
1452 AcroRd32.exe
1452 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\78c02913c8655b31c69c35d510ea9d925421964b56d225ae9e6704e5cd7b5e6d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1452-54-0x0000000075AE1000-0x0000000075AE3000-memory.dmp

Filesize
8KB

Download