a16e466bed46fcf9c0a771ca0e41bc42a1ac13e66717354e4824f61d1695dbb1 | Triage

Analysis

max time kernel
151s
max time network
128s
platform
windows7_x64
resource
win7-en-20211208
submitted
28-02-2022 03:10

Sharing

Report Analysis Logs

General

Target

EUA 27034_FS for Vaccination Providers-Full EUA PI_Final_4.6.2021.pdf
Size

1.1MB
MD5

237afde9fad4619889d9cde8e80a5180
SHA1

b0b53f8cae545c2961b662941652390ccad02700
SHA256

8ceea84eccec373701f4ed54703beb6381d05be2bdbb93ae58d78726fdca6807
SHA512

86de2d6c65bfe241d13a06dbdae1727021d93ba11f3e5db8eda9a899ebbb56b646ff041755803caaa5ae4cb10bef1e9d941267a1e0188c32138c45382021b2f8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

732 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

732 AcroRd32.exe
732 AcroRd32.exe
732 AcroRd32.exe
732 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\EUA 27034_FS for Vaccination Providers-Full EUA PI_Final_4.6.2021.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:732

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/732-55-0x00000000763B1000-0x00000000763B3000-memory.dmp

Filesize
8KB

Download