19ad3ac63055a24ae94224c18808308f96f3167095d126423001686686b436c0 | Triage

Analysis

max time kernel
150s
max time network
124s
platform
windows7_x64
resource
win7-en-20211208
submitted
19-02-2022 23:26

Sharing

Report Analysis Logs

General

Target

19ad3ac63055a24ae94224c18808308f96f3167095d126423001686686b436c0.pdf
Size

767KB
MD5

5d9ed128316cfa8ee62b91c75c28acd1
SHA1

74101734d91ea64878b4e5739c18fc38b2c90b82
SHA256

19ad3ac63055a24ae94224c18808308f96f3167095d126423001686686b436c0
SHA512

8f3c15c004d3e5428f72685336c2a9f0f2dc53008b5dd86eda9c74d0f69da03011cab05420314a15064233b55c34ffc55e05a329db9bddb6cc37c997e165125c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

612 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

612 AcroRd32.exe
612 AcroRd32.exe
612 AcroRd32.exe
612 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\19ad3ac63055a24ae94224c18808308f96f3167095d126423001686686b436c0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:612

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/612-54-0x0000000075891000-0x0000000075893000-memory.dmp

Filesize
8KB

Download