bc24454f2cd45e91848bc6f3b202ffbfc0e1274c947f4eb3f0f0f9b107a600ea | Triage

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-en-20211208
submitted
15-02-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 150222.pdf
Size

291KB
MD5

4a9872b4d20a96196c3ac5708c7e19dc
SHA1

fd45b82aadb05bf90594ddd10dca69d21850795f
SHA256

bc24454f2cd45e91848bc6f3b202ffbfc0e1274c947f4eb3f0f0f9b107a600ea
SHA512

b6cf3ed194ced6797693e8ad05d34ff135a339d502a3d8d6f864089cc9b5a52c8c440e5bf44edf095578164d5580a4bae1d237885ca3e2d9da9856159eff5175

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1172 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1172 AcroRd32.exe
1172 AcroRd32.exe
1172 AcroRd32.exe
1172 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 150222.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1172

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1172-54-0x0000000074F01000-0x0000000074F03000-memory.dmp

Filesize
8KB

Download