2c2b2deab58680cacbebd3ea28b15065c8a2795127762ce9f7be22e14d3c39ee | Triage

Analysis

max time kernel
4294210s
max time network
122s
platform
windows7_x64
resource
win7-20220223-en
submitted
01-03-2022 09:03

Sharing

Report Analysis Logs

General

Target

DotsPlots.Gas.Grains.Gaps.1Mar22.pdf
Size

286KB
MD5

e80fdf3f4a9e3cf1c55b3c868f7710c2
SHA1

885720fa9c46523f25a72157ae6dbcbae02274d5
SHA256

2c2b2deab58680cacbebd3ea28b15065c8a2795127762ce9f7be22e14d3c39ee
SHA512

e02ac89a854b9955110b0d6daf24762a726c0be367288751653d7f6c7b6585b9287670803297da838d58d700d4090ff9159080eb20ee737acf09782d0f9ce9d0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1780 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1780 AcroRd32.exe
1780 AcroRd32.exe
1780 AcroRd32.exe
1780 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DotsPlots.Gas.Grains.Gaps.1Mar22.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1780

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1780-54-0x0000000075BE1000-0x0000000075BE3000-memory.dmp

Filesize
8KB

Download