0590352354b7b4c88b79ea90e58cd25066b9fa291d36f6a9ca2bfb8a82703089 | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-en-20211208
submitted
27-01-2022 19:02

Sharing

Report Analysis Logs

General

Target

2_HouseView-Outlook2022.pdf
Size

8.4MB
MD5

3cd0e005119b9def0c61b5e6f90690ae
SHA1

e44eb8666d709394738cf36978df5333d4cb19cf
SHA256

0590352354b7b4c88b79ea90e58cd25066b9fa291d36f6a9ca2bfb8a82703089
SHA512

b8f877afb87f25f2754f9f828169bb0d53ddb7d91b522924939457d8b7ae3760fcc5e87ad4fcc9dc00602386286dde2f137ba3d1d2bdde532993c1d295d33f49

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1928 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1928 AcroRd32.exe
1928 AcroRd32.exe
1928 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2_HouseView-Outlook2022.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1928

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1928-55-0x0000000076511000-0x0000000076513000-memory.dmp

Filesize
8KB

Download