79d39a69b01a0118c17899daaaefba71025983b3790d899d31fd511a44e3bb41 | Triage

Analysis

max time kernel
150s
max time network
119s
platform
windows7_x64
resource
win7-en-20211208
submitted
22-02-2022 01:00

Sharing

Report Analysis Logs

General

Target

IRQ2107798.pdf
Size

24KB
MD5

faa327dbd4ea608184f4a1fef22a5767
SHA1

205e931c3fc0bff98a5b73357b9cd3a253a7f22a
SHA256

79d39a69b01a0118c17899daaaefba71025983b3790d899d31fd511a44e3bb41
SHA512

1248c4566c95316694626f31a6d175345533a3b00f09922f30d87b280ef11602bee6d2654a553adbc1c1a78e8c87072896fd5b1e8c809fbc7701d2c8c896fdfe

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1088 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1088 AcroRd32.exe
1088 AcroRd32.exe
1088 AcroRd32.exe
1088 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\IRQ2107798.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1088

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1088-54-0x0000000075341000-0x0000000075343000-memory.dmp

Filesize
8KB

Download