b8ff46a16182290f536e11c2779efc114a547fb978ce7ba9c7824942624b2906 | Triage

Analysis

max time kernel
4294211s
max time network
119s
platform
windows7_x64
resource
win7-20220223-en
submitted
28-02-2022 01:06

Sharing

Report Analysis Logs

General

Target

DTO 280222.pdf
Size

297KB
MD5

7e7421f893c13ce4608b6c60985a6b01
SHA1

192e91672796c1132c66e2377c5496c59e1ba590
SHA256

b8ff46a16182290f536e11c2779efc114a547fb978ce7ba9c7824942624b2906
SHA512

cb21d9e96edca03e0f6eecf171d9f8fcbae17422d018cb0eb526f279331b0e395a0e0e198f2be35cea90d374ec438b27abefbd41337515be1ff70dfe9af06c2b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1568 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1568 AcroRd32.exe
1568 AcroRd32.exe
1568 AcroRd32.exe
1568 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 280222.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1568

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1568-54-0x0000000076771000-0x0000000076773000-memory.dmp

Filesize
8KB

Download