9f651ae6ea538238748614a7f86fe2b0f76e881d6c38da581f284e4b6f79b0ca | Triage

Analysis

max time kernel
158s
max time network
126s
platform
windows7_x64
resource
win7-en-20211208
submitted
28-01-2022 13:34

Sharing

Report Analysis Logs

General

Target

01/2015.5.27/12.pdf
Size

188KB
MD5

42c7e182b17036e117f6119582ab9f53
SHA1

494ca78104a76bb0c8acae01668da4fa3d9c7680
SHA256

7a08c9a6765b4ded3c8089b834f524f2c7cc7b5400278eabba16db8f1c1d54e2
SHA512

9766547666d99c9344f422179529144c436b85267026cbb916b48ff63bdf78ca2d51c204f6bd53e4f1c865e2043fc90987ff454245d3648d5f5f4a4a76c30d7e

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\01\2015.5.27\12.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1616

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-55-0x0000000076921000-0x0000000076923000-memory.dmp

Filesize
8KB

Download