f73c1bb000fc7ecb4f19392d1a67cf4c56657cb74fe0d010e1171d28097dc0ff | Triage

Analysis

max time kernel
165s
max time network
139s
platform
windows7_x64
resource
win7-en-20211208
submitted
12-02-2022 09:53

Sharing

Report Analysis Logs

General

Target

Smart Enterprises Utilize Contemporary Quality Management Systemsoqwmkelpey.pdf
Size

8KB
MD5

7ec4f0ec2e3d04dde067c8998808d8f7
SHA1

f5d379b0773eeddd63d3a03693d4e12d3f767f15
SHA256

f73c1bb000fc7ecb4f19392d1a67cf4c56657cb74fe0d010e1171d28097dc0ff
SHA512

b04836190cfd3eefdcab8c2a1fa214ff55f379c44688e9c0490362c79582aed9cf996070925d1a82f6e8da1deb855836a028eb8ed382ed24553e101b108e8893

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

952 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

952 AcroRd32.exe
952 AcroRd32.exe
952 AcroRd32.exe
952 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Smart Enterprises Utilize Contemporary Quality Management Systemsoqwmkelpey.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/952-54-0x0000000076491000-0x0000000076493000-memory.dmp

Filesize
8KB

Download