2c7b2646873fab268664e23fa231be78cf80d05d423c2d6957da228923569baf | Triage

Analysis

max time kernel
151s
max time network
125s
platform
windows7_x64
resource
win7-en-20211208
submitted
19-02-2022 23:10

Sharing

Report Analysis Logs

General

Target

2c7b2646873fab268664e23fa231be78cf80d05d423c2d6957da228923569baf.pdf
Size

405KB
MD5

a74c619fd61381a51734235c0539e827
SHA1

e878f3ba16a7ee1498c762115e744095f54c8230
SHA256

2c7b2646873fab268664e23fa231be78cf80d05d423c2d6957da228923569baf
SHA512

ccc7a46f49525f086d4b2d1c8868cd18e9b361c90e025c58c50be46d61a94cf1b1c91699d6119b4e2bf25d4b39953162f24f16d310f2b5013e7e1df25e2036e9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

812 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

812 AcroRd32.exe
812 AcroRd32.exe
812 AcroRd32.exe
812 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2c7b2646873fab268664e23fa231be78cf80d05d423c2d6957da228923569baf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:812

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/812-53-0x0000000075F21000-0x0000000075F23000-memory.dmp

Filesize
8KB

Download