8ae7f91658653d0a69f5c48e86d8a3e33bc31475b6c54f0f0060460d20256916 | Triage

Analysis

max time kernel
4294210s
max time network
120s
platform
windows7_x64
resource
win7-20220223-en
submitted
24-02-2022 02:06

Sharing

Report Analysis Logs

General

Target

DTO 240222.pdf
Size

302KB
MD5

903e97eba49ec190439bc23f6bde61a6
SHA1

b0c1e761b32c4520fcfa480ecd11bcc8a2b9a564
SHA256

8ae7f91658653d0a69f5c48e86d8a3e33bc31475b6c54f0f0060460d20256916
SHA512

498cc5ffed7fbb4ef847f46db54f073a29c99e5cb22594afd51b3fe241936c78d5d05c253462edf60e129585b8d7d0c795f3bcadf3d1c45a4635bd19e33e4289

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1204 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1204 AcroRd32.exe
1204 AcroRd32.exe
1204 AcroRd32.exe
1204 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 240222.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1204

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1204-54-0x0000000075CC1000-0x0000000075CC3000-memory.dmp

Filesize
8KB

Download