7ef5582e2b06bb6fd5eba041d5b700744267ea55c8f0e64cdd44fd431c05bf4b | Triage

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-en-20211208
submitted
16-02-2022 09:33

Sharing

Report Analysis Logs

General

Target

DOSSIER-IMPORTANT.pdf
Size

215KB
MD5

2a990c54747caaab08ae0482426edba3
SHA1

9c2748f4685c3dffe58edc5d4503efdd904c6294
SHA256

7ef5582e2b06bb6fd5eba041d5b700744267ea55c8f0e64cdd44fd431c05bf4b
SHA512

26e775db63f718f60d8b69ca696aed119ebb58f76da0452b5b4ef35670f3f8b0f8cd6acb7e8c25fcdf637f533758b8ab1b5085bba150b7c5cbb868d0489f387d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1732 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1732 AcroRd32.exe
1732 AcroRd32.exe
1732 AcroRd32.exe
1732 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DOSSIER-IMPORTANT.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1732-54-0x0000000074F11000-0x0000000074F13000-memory.dmp

Filesize
8KB

Download