5f709b4c46af41aa77f59a486b95e6297d43c5e87984bf4cac7ffacff03bc4ec | Triage

Analysis

max time kernel
153s
max time network
122s
platform
windows7_x64
resource
win7-en-20211208
submitted
21-01-2022 23:47

Sharing

Report Analysis Logs

General

Target

5f709b4c46af41aa77f59a486b95e6297d43c5e87984bf4cac7ffacff03bc4ec.pdf
Size

67KB
MD5

d24f8266c6f0f7c8be3e98a610f0b707
SHA1

ae4d0212b04c704abb269ad9279557a62b2766ec
SHA256

5f709b4c46af41aa77f59a486b95e6297d43c5e87984bf4cac7ffacff03bc4ec
SHA512

666c33c97ebc91f129e3a8629ed23f4b7e0ebe7de32fc50aecaa2011a217d560c54fbb2372da02b905ce7d184a7dcb9484824f8a091bdeb24efb7f5a303bafde

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1308 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1308 AcroRd32.exe
1308 AcroRd32.exe
1308 AcroRd32.exe
1308 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5f709b4c46af41aa77f59a486b95e6297d43c5e87984bf4cac7ffacff03bc4ec.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1308

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1308-54-0x0000000075CE1000-0x0000000075CE3000-memory.dmp

Filesize
8KB

Download