6f3e81a2a2732b60736cf98ac192d48ac735c021ed4fc65e49a9f49bc2a21c4b | Triage

Analysis

max time kernel
152s
max time network
120s
platform
windows7_x64
resource
win7-en-20211208
submitted
21-01-2022 23:42

Sharing

Report Analysis Logs

General

Target

6f3e81a2a2732b60736cf98ac192d48ac735c021ed4fc65e49a9f49bc2a21c4b.pdf
Size

64KB
MD5

a169e96ebecd9f7255a368bdf6945a23
SHA1

ce98ce9ea78b65fe64dd5e052683e1c7754bccd3
SHA256

6f3e81a2a2732b60736cf98ac192d48ac735c021ed4fc65e49a9f49bc2a21c4b
SHA512

f9412b030ae063f0df0d69e825aeba2329c4c7a771cb8b0cb2927eaebb3360647fef400fe6bac72119048074ce79d81474fb90a1e7455506bd82be0b81608181

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

980 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

980 AcroRd32.exe
980 AcroRd32.exe
980 AcroRd32.exe
980 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6f3e81a2a2732b60736cf98ac192d48ac735c021ed4fc65e49a9f49bc2a21c4b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:980

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/980-53-0x00000000751B1000-0x00000000751B3000-memory.dmp

Filesize
8KB

Download