a16e466bed46fcf9c0a771ca0e41bc42a1ac13e66717354e4824f61d1695dbb1 | Triage

Analysis

max time kernel
152s
max time network
123s
platform
windows7_x64
resource
win7-en-20211208
submitted
28-02-2022 03:10

Sharing

Report Analysis Logs

General

Target

SUMMARY OF PRODUCT CHARACTERISTICS/comirnaty-epar-product-information_en.pdf
Size

737KB
MD5

6b0b509b3c6d375e989213a1ed32f2b2
SHA1

cb96c3fd157469362268f05644498562ca83317e
SHA256

b7af9b46c0ad2c921b0d38736013f39106d8eda881947d07ba12f587f9d3ae81
SHA512

e7f0f28794c2a4d66caf848134cbe734cb2fc397d4b3d9ada600323df67c6201a224ae746d208b8799777c7c96d9e48beeada8449bb3c815a256d9d0901a8226

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1128 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1128 AcroRd32.exe
1128 AcroRd32.exe
1128 AcroRd32.exe
1128 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\SUMMARY OF PRODUCT CHARACTERISTICS\comirnaty-epar-product-information_en.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1128

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1128-55-0x0000000075421000-0x0000000075423000-memory.dmp

Filesize
8KB

Download