98f86cc7d11a6b7b988ccd2600c83f84cb903f3484e3f71c5e7999eb435fcc0e | Triage

Analysis

max time kernel
4294182s
max time network
124s
platform
windows7_x64
resource
win7-20220223-en
submitted
26-02-2022 03:32

Sharing

Report Analysis Logs

General

Target

68593326882.pdf
Size

81KB
MD5

b458c2f7b57420cbbc8a5b47a47ae439
SHA1

153dce1dab4f8ebbb61fbe5f4ff76615b374c15f
SHA256

98f86cc7d11a6b7b988ccd2600c83f84cb903f3484e3f71c5e7999eb435fcc0e
SHA512

31e319df4b367fed675f8f35ec75f02af481946c9cd5832b56067cd5e64aa6e406ee7acbb82073f3e9e3e5d999355524f8692b2c8f7b65051bcf3104936ca236

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1992 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1992 AcroRd32.exe
1992 AcroRd32.exe
1992 AcroRd32.exe
1992 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68593326882.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1992

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1992-54-0x0000000076271000-0x0000000076273000-memory.dmp

Filesize
8KB

Download