f19a3a0848b4384dc6908c812b22354688caa3f228c6f039b39d0042d5ad4cae | Triage

Analysis

max time kernel
153s
max time network
126s
platform
windows7_x64
resource
win7-en-20211208
submitted
25-02-2022 02:09

Sharing

Report Analysis Logs

General

Target

DTO 250222.pdf
Size

296KB
MD5

e5e0f1908760a8745b3612ac02f33573
SHA1

737e0a326fd540f58ba8b96f4edee70c1877b5ba
SHA256

f19a3a0848b4384dc6908c812b22354688caa3f228c6f039b39d0042d5ad4cae
SHA512

833a91d1dc720be2acad66759927baf83f527bb2d836fa64dbb961fcb88dc08878e8f85d1d96ff24e66010e63cef60617169fc65f42a9c5d55b840c1db38f55a

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1796 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1796 AcroRd32.exe
1796 AcroRd32.exe
1796 AcroRd32.exe
1796 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 250222.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1796-55-0x0000000075831000-0x0000000075833000-memory.dmp

Filesize
8KB

Download