fbc787902449c08cf7ab0e2eb1183952bde0808f0cd86aa2c5c98a25e3dcd2a6 | Triage

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-en-20211208
submitted
19-02-2022 02:28

Sharing

Report Analysis Logs

General

Target

Microwave_Auditory_Effects_And_Applications-Book_by_James_C_Lin_Phd_1978-1.pdf
Size

5.6MB
MD5

98b7a45bb9c36ae5ecbc5a9a80a1865c
SHA1

af27816f9325db2560534ff8f075a04acaa7ff44
SHA256

fbc787902449c08cf7ab0e2eb1183952bde0808f0cd86aa2c5c98a25e3dcd2a6
SHA512

b591b70bf7ae6509a49b99c0f80aa7f95132ffc2c94aa2679190a6155c513e80502941e12ce11c71106372361c5d6d3d3bb2b48255c2b0e60badefb124556c10

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1612 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1612 AcroRd32.exe
1612 AcroRd32.exe
1612 AcroRd32.exe
1612 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Microwave_Auditory_Effects_And_Applications-Book_by_James_C_Lin_Phd_1978-1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1612

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1612-55-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

Filesize
8KB

Download