550e51618a4801601efe5bad60041427749ab0f0928020d667be1ff8f15e61e9 | Triage

Resubmissions

25-02-2022 12:36

220225-ptb1jshddr 4

25-02-2022 12:24

220225-plc8msgbb8 4

Analysis

max time kernel
4294178s
max time network
119s
platform
windows7_x64
resource
win7-20220223-en
submitted
25-02-2022 12:36

Sharing

Report Analysis Logs

General

Target

Microsoft Security Slate - February 24, 2022.pdf
Size

180KB
MD5

5ea0ec873d875461667242cdf59a8a14
SHA1

fd133f268cb5c8a0e93244e64054dcc5dcffe85d
SHA256

550e51618a4801601efe5bad60041427749ab0f0928020d667be1ff8f15e61e9
SHA512

95dad6dddf5b2873d9ab13849f45c44ff27b6f99dd018760ececa45e38fbf2d503845d75a28787d91a1ab47de4d5e92ccd53e8d0377063535686f5a4449885b4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1204 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1204 AcroRd32.exe
1204 AcroRd32.exe
1204 AcroRd32.exe
1204 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Microsoft Security Slate - February 24, 2022.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1204

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1204-54-0x0000000074E31000-0x0000000074E33000-memory.dmp

Filesize
8KB

Download