66aa6936746711b3f56317090c07fdc03633bb8104b2b2acda44738602bc06d5 | Triage

Analysis

max time kernel
150s
max time network
119s
platform
windows7_x64
resource
win7-en-20211208
submitted
24-02-2022 05:24

Sharing

Report Analysis Logs

General

Target

66aa6936746711b3f56317090c07fdc03633bb8104b2b2acda44738602bc06d5.pdf
Size

129KB
MD5

d9709acc21de3cb19f3ec95d5947ae07
SHA1

32cd827342344dd789086d11c2c91b32ddfc8e25
SHA256

66aa6936746711b3f56317090c07fdc03633bb8104b2b2acda44738602bc06d5
SHA512

d61d7c517d78a0310688e5524be7dca916587a37c49d417675033f79ed67d746887ddf123fa11f501f8981555f69608d8575d532a2d3c1570e850e6d0799beb3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

760 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

760 AcroRd32.exe
760 AcroRd32.exe
760 AcroRd32.exe
760 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66aa6936746711b3f56317090c07fdc03633bb8104b2b2acda44738602bc06d5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:760

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/760-55-0x0000000076071000-0x0000000076073000-memory.dmp

Filesize
8KB

Download