14eb3fa532f50ce1a01edda36f2f62d1fae902340cb529ab2f46c09635c6fc66 | Triage

Analysis

max time kernel
150s
max time network
127s
platform
windows7_x64
resource
win7-en-20211208
submitted
19-02-2022 23:30

Sharing

Report Analysis Logs

General

Target

14eb3fa532f50ce1a01edda36f2f62d1fae902340cb529ab2f46c09635c6fc66.pdf
Size

652KB
MD5

36e5726399319691b6d38150eb778ea7
SHA1

f26e70199058b5cf4ade1c81e42abff561919f96
SHA256

14eb3fa532f50ce1a01edda36f2f62d1fae902340cb529ab2f46c09635c6fc66
SHA512

a2c1dbd2030a41882f568603ee3ef9470be451d9ee5c566ae068e0ad949f80a5e3ef9d6c63e4038435a7c4db905ca8c55dd56e2257e9c73c12897e4210383292

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

980 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

980 AcroRd32.exe
980 AcroRd32.exe
980 AcroRd32.exe
980 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14eb3fa532f50ce1a01edda36f2f62d1fae902340cb529ab2f46c09635c6fc66.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:980

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/980-53-0x00000000751B1000-0x00000000751B3000-memory.dmp

Filesize
8KB

Download