c9761f30956f5ba1ac9abc8b000eae8686158d05238d9e156f42dd5c17520296 | Triage

Analysis

max time kernel
4294210s
max time network
122s
platform
windows7_x64
resource
win7-20220223-en
submitted
28-02-2022 03:11

Sharing

Report Analysis Logs

General

Target

c9761f30956f5ba1ac9abc8b000eae8686158d05238d9e156f42dd5c17520296.pdf
Size

82KB
MD5

a8bb31dcf791e09e656618ab726cdc2d
SHA1

9533ffa146e213e64e70c236344cf84484caa993
SHA256

c9761f30956f5ba1ac9abc8b000eae8686158d05238d9e156f42dd5c17520296
SHA512

36b98967d10afd78cda6d0f5ba7eb6ba9c6a8ef767214aa5bb5db1f4e8e498e37b249a012f710ee0eceb0fc5bff92ba3672446751acf4910af89463f97c52106

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1560 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1560 AcroRd32.exe
1560 AcroRd32.exe
1560 AcroRd32.exe
1560 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c9761f30956f5ba1ac9abc8b000eae8686158d05238d9e156f42dd5c17520296.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1560

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1560-54-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

Filesize
8KB

Download