3b54ba57611b030eeca4e5083992064c4a2d4ab2d7c4b6e24e0b0710018d9ada | Triage

Analysis

max time kernel
157s
max time network
129s
platform
windows7_x64
resource
win7-en-20211208
submitted
17-02-2022 00:00

Sharing

Report Analysis Logs

General

Target

PEF Staff Physicians 2021.pdf
Size

342KB
MD5

de1ab9223dae5bb4a7e838b116d7ba28
SHA1

64665d93b43a2f628ce33d19edaab14cb6798630
SHA256

3b54ba57611b030eeca4e5083992064c4a2d4ab2d7c4b6e24e0b0710018d9ada
SHA512

9aec08bcfe0efb2460a5e0f0858dff52dbb3832cd10b82f1c18a84a7f5379e68641738a276e3d1fe462232ceaa6a06ca2da8045012e44358ecff23f575475104

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1760 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1760 AcroRd32.exe
1760 AcroRd32.exe
1760 AcroRd32.exe
1760 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PEF Staff Physicians 2021.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1760

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1760-54-0x0000000075341000-0x0000000075343000-memory.dmp

Filesize
8KB

Download