146138b6ffcf159b14d95d16ce02c6f3138b84af30cbae0aa3ba12d796bda762 | Triage

Analysis

max time kernel
160s
max time network
142s
platform
windows7_x64
resource
win7-en-20211208
submitted
12-02-2022 09:50

Sharing

Report Analysis Logs

General

Target

Search Engine Marketing Is Enjoyable To Acquire Advice Aboutbrexdgtnvp.pdf
Size

5KB
MD5

e42d966b1b638bee8da8544768a24107
SHA1

dd1ec94204d51c05f0737c9bd55028de2335f009
SHA256

146138b6ffcf159b14d95d16ce02c6f3138b84af30cbae0aa3ba12d796bda762
SHA512

57c21c387830b732f4d1c48ef36d5783ed9985076aea43f63801a1963599ac5a8bc87cd9cb304b67deecf18384b757bce58d6fea3d856389dfd1da038a112dc0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1192 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1192 AcroRd32.exe
1192 AcroRd32.exe
1192 AcroRd32.exe
1192 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Search Engine Marketing Is Enjoyable To Acquire Advice Aboutbrexdgtnvp.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1192-55-0x0000000075831000-0x0000000075833000-memory.dmp

Filesize
8KB

Download