deb2eca67286838dd1fa0f5cb85f0d495ef7ae25f564a5889bb653e0c280e3b8 | Triage

Analysis

max time kernel
4294183s
max time network
124s
platform
windows7_x64
resource
win7-20220223-en
submitted
26-02-2022 03:37

Sharing

Report Analysis Logs

General

Target

zesese.pdf
Size

428KB
MD5

4bafd162c01b6490017f0457cfa232d6
SHA1

992ef76a4adf4791501dcdd47ba7121750630cf4
SHA256

deb2eca67286838dd1fa0f5cb85f0d495ef7ae25f564a5889bb653e0c280e3b8
SHA512

333e99fa5eab91bb7e414d38298cbc099484e3bcbf9cc812631523620ac9506b15f66c8574e0355fbb07c79c75e8229070490385fbe1a65e0ab914adcf01049a

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1096 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1096 AcroRd32.exe
1096 AcroRd32.exe
1096 AcroRd32.exe
1096 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\zesese.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1096

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1096-54-0x0000000075801000-0x0000000075803000-memory.dmp

Filesize
8KB

Download