709f31e12c1022462dd698e75f36f23614694638c2210a3fc1916fe170d59b51 | Triage

Analysis

max time kernel
157s
max time network
118s
platform
windows7_x64
resource
win7-en-20211208
submitted
30-01-2022 00:20

Sharing

Report Analysis Logs

General

Target

709f31e12c1022462dd698e75f36f23614694638c2210a3fc1916fe170d59b51.pdf
Size

6KB
MD5

b28ae4bc3dc33f58e0e95d0c526b35e7
SHA1

64b4289c6ac4b1e84ecc368af893261ced973250
SHA256

709f31e12c1022462dd698e75f36f23614694638c2210a3fc1916fe170d59b51
SHA512

894cdaa9ad634132375f4e5cf3dae092ac9f2346612557d96f7bd0b4b92f3ab28c3e9e1bfdcc37781e96bfb90a2cdf6c380b9b2b355b8495d9802e128d33217e

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1564 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1564 AcroRd32.exe
1564 AcroRd32.exe
1564 AcroRd32.exe
1564 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\709f31e12c1022462dd698e75f36f23614694638c2210a3fc1916fe170d59b51.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1564

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1564-54-0x00000000766D1000-0x00000000766D3000-memory.dmp

Filesize
8KB

Download