434d39bfbcee378ed62a02aa40acc6507aa00b2a3cb0bf356c0b23cc9eebcd77 | Triage

Analysis

max time kernel
4294211s
max time network
124s
platform
windows7_x64
resource
win7-20220223-en
submitted
28-02-2022 03:16

Sharing

Report Analysis Logs

General

Target

NewCovid-21/GEO-CFUND-2009_CCM Agreement_Facesheet - signed.pdf

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1592	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1592	AcroRd32.exe
1592	AcroRd32.exe
1592	AcroRd32.exe
1592	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NewCovid-21\GEO-CFUND-2009_CCM Agreement_Facesheet - signed.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1592-54-0x0000000075F71000-0x0000000075F73000-memory.dmp

Filesize
8KB

Download
memory/1592-55-0x0000000002840000-0x00000000028B6000-memory.dmp

Filesize
472KB

Download