7e216d3d577596425789b3c9839ebffc2c8fb5bdb8df633a6ed9cdd91dcc2004 | Triage

Analysis

max time kernel
153s
max time network
125s
platform
windows7_x64
resource
win7-en-20211208
submitted
21-02-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 210222.pdf
Size

298KB
MD5

aaaa62e0bff4e3254c84d9c052f96747
SHA1

1f06ec503d8e26f5675ae93431e7ed8bc83a15f2
SHA256

7e216d3d577596425789b3c9839ebffc2c8fb5bdb8df633a6ed9cdd91dcc2004
SHA512

d77abc82ed1597aefa033429eb1848471bea2e86e4b9fcbbfa96fa421ed7e02aa4dade7114f968f8712e6964d2d992f0425d578e91238bbc20829772abaae591

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

832 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

832 AcroRd32.exe
832 AcroRd32.exe
832 AcroRd32.exe
832 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 210222.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:832

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/832-54-0x0000000075891000-0x0000000075893000-memory.dmp

Filesize
8KB

Download