4dea3a8ec40207fca613640e5e2a3c12215f80ecd68ee0496f68217d68af2b57 | Triage

Analysis

max time kernel
151s
max time network
131s
platform
windows7_x64
resource
win7-en-20211208
submitted
28-01-2022 13:26

Sharing

Report Analysis Logs

General

Target

4dea3a8ec40207fca613640e5e2a3c12215f80ecd68ee0496f68217d68af2b57.pdf
Size

181KB
MD5

662567bf29cc2fb7dcb36ebeddb23da5
SHA1

3b60e5c881af8c9ee2633b5c257f2ac8dd15100a
SHA256

4dea3a8ec40207fca613640e5e2a3c12215f80ecd68ee0496f68217d68af2b57
SHA512

6d1379558131e1839022085ab16119419cee0d7467544074d5ebf6045547300c491b1c14613d25d64c81b400d2298983d28f1db51f709d3b3397a49d3a7660e1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1444 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1444 AcroRd32.exe
1444 AcroRd32.exe
1444 AcroRd32.exe
1444 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4dea3a8ec40207fca613640e5e2a3c12215f80ecd68ee0496f68217d68af2b57.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1444

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1444-55-0x0000000075191000-0x0000000075193000-memory.dmp

Filesize
8KB

Download