a460c8abb3c662476e695ceae0e2cb65e4f4fafd2500db91d6703112c563c2fa | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-en-20211208
submitted
09-02-2022 15:42

Sharing

Report Analysis Logs

General

Target

Nuix Discover 10.8 - Upgrade Checklist.pdf
Size

1.5MB
MD5

ba7d192b924db1982c12131b602e4a68
SHA1

cf30b439149daac4095831119eb5d650a5d21b99
SHA256

a460c8abb3c662476e695ceae0e2cb65e4f4fafd2500db91d6703112c563c2fa
SHA512

a48a20beff37304282063bc309864e6a9a7889270398723bdb499f01aa2ae6d645268d350b8a264ee3f27aee715a1b50296835e21718bdb0c106cf1edb9f2dac

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1668 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1668 AcroRd32.exe
1668 AcroRd32.exe
1668 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Nuix Discover 10.8 - Upgrade Checklist.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1668

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1668-54-0x0000000075431000-0x0000000075433000-memory.dmp

Filesize
8KB

Download