9ef15870104a32b1db6b60b11ddf62dbd87f0c5e84d7f382ea56b651d560b150 | Triage

Resubmissions

21-02-2022 09:29

220221-lgbbpsaack 3

21-02-2022 09:21

220221-lbsc2agge6 3

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-en-20211208
submitted
21-02-2022 09:21

Sharing

Report Analysis Logs

General

Target

jena_263905_prep_20220208101946812.pdf
Size

13.6MB
MD5

169a041e1604adfed0d5970f71bf0405
SHA1

c1df58d894e30800a930bd60a6ea07def2419fa2
SHA256

9ef15870104a32b1db6b60b11ddf62dbd87f0c5e84d7f382ea56b651d560b150
SHA512

e1c62890a28b27f0f7e386170899c8cffa8e53addd7ee3bd5d6f07a22b1e817230eeeda08b151d61011005d7a37ba26cbc49eb3c8ec0acd238f92489eb5aff5f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

984 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

984 AcroRd32.exe
984 AcroRd32.exe
984 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\jena_263905_prep_20220208101946812.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/984-54-0x0000000076451000-0x0000000076453000-memory.dmp

Filesize
8KB

Download