Analysis
-
max time kernel
153s -
max time network
130s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
29-01-2022 13:20
Static task
static1
Behavioral task
behavioral1
Sample
d90f581c543cba58332c5c67e2a464387142e72bb9d6960bcc9dd52ef2a948f4.pdf
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
d90f581c543cba58332c5c67e2a464387142e72bb9d6960bcc9dd52ef2a948f4.pdf
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
General
-
Target
d90f581c543cba58332c5c67e2a464387142e72bb9d6960bcc9dd52ef2a948f4.pdf
-
Size
521KB
-
MD5
c5ef6b6c17eb5e432a11dead03d9299d
-
SHA1
3882949d434671d093bff1b29be5be9081b56f93
-
SHA256
d90f581c543cba58332c5c67e2a464387142e72bb9d6960bcc9dd52ef2a948f4
-
SHA512
67cc30c828b6edd6bf25acb438deac23201230c4712c6cfefdbcc6bc0c904887789ab88ae052265aa26ff1585c5b715f2be2f4266c87640f12f7b2d66a2399b4
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 812 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 812 AcroRd32.exe 812 AcroRd32.exe 812 AcroRd32.exe 812 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d90f581c543cba58332c5c67e2a464387142e72bb9d6960bcc9dd52ef2a948f4.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:812