c7620336028f63a67320dade146fcc99368c0df21438cbdff31349582289978c | Triage

Analysis

max time kernel
150s
max time network
125s
platform
windows7_x64
resource
win7-en-20211208
submitted
19-02-2022 21:19

Sharing

Report Analysis Logs

General

Target

c7620336028f63a67320dade146fcc99368c0df21438cbdff31349582289978c.pdf
Size

652KB
MD5

709895dd53d55eec5a556cf1544fc5b9
SHA1

f4c8eb3903a065e08663511636d83ed9a577fb76
SHA256

c7620336028f63a67320dade146fcc99368c0df21438cbdff31349582289978c
SHA512

c6844ced698a658560da06befa3df323773df7de6678600b9fb9c6e72c7da9b9578d56e4700bff00260c0e4a6adaf1a955e047f160e4f9e27cf4cf84649c4c51

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

964 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

964 AcroRd32.exe
964 AcroRd32.exe
964 AcroRd32.exe
964 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c7620336028f63a67320dade146fcc99368c0df21438cbdff31349582289978c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:964

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/964-54-0x0000000075601000-0x0000000075603000-memory.dmp

Filesize
8KB

Download