fa156eb134ca741aa73dc6f02d5a53aff43d5f7e6cf87a3af861def103e5ef0b | Triage

Analysis

max time kernel
4294212s
max time network
126s
platform
windows7_x64
resource
win7-20220223-en
submitted
02-03-2022 02:28

Sharing

Report Analysis Logs

General

Target

DTO 020322.pdf
Size

274KB
MD5

e01bf3f9d3d4fc8dea608b70d4caca77
SHA1

b7d86e1858737974fa3de521839af40c860d3874
SHA256

fa156eb134ca741aa73dc6f02d5a53aff43d5f7e6cf87a3af861def103e5ef0b
SHA512

1c49836dffaa4547b194cc5b411464206530b0e57c12b888911d734458e3f6a73334f0b0cef1dcb78282e000e28a576a447bccd32224715a9cfd7d72b833da0c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1124 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1124 AcroRd32.exe
1124 AcroRd32.exe
1124 AcroRd32.exe
1124 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 020322.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1124

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1124-54-0x0000000074FF1000-0x0000000074FF3000-memory.dmp

Filesize
8KB

Download