7d1f54cd7c736bac8fbe073aff976d624f15f45f69f907ccae20bf80bde889eb | Triage

Analysis

max time kernel
145s
max time network
121s
platform
windows7_x64
resource
win7-en-20211208
submitted
18-02-2022 17:00

Sharing

Report Analysis Logs

General

Target

Proceso judicial 17-02.pdf
Size

87KB
MD5

eb7b84c0499bde8365aadcdaf2f15b90
SHA1

99a3f5d4b16e76bbeccba636f0a784d55445e464
SHA256

7d1f54cd7c736bac8fbe073aff976d624f15f45f69f907ccae20bf80bde889eb
SHA512

3e4c1ad89cff656b1ecdcbf03e688584d3c5d28eedcc4d6f555d6c046830d6734c3864120b9ef790d3903996c4d5184b63cd23f76235acc6fd53a492ed8b1b94

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1660 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1660 AcroRd32.exe
1660 AcroRd32.exe
1660 AcroRd32.exe
1660 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Proceso judicial 17-02.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1660-54-0x0000000076141000-0x0000000076143000-memory.dmp

Filesize
8KB

Download