c4366458a92f326249dadb7d2e16d949117c323445bc2b667d85c2981acae110 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-en-20211208
submitted
03-03-2022 15:20

Sharing

Report Analysis Logs

General

Target

Report - Catalyst Maturity Assessment insights for financial services and insurance.pdf
Size

407KB
MD5

fa119467f64a6f009055ea461a1c1af5
SHA1

6547aaadb418a1ff1a1f24b769a6ad1926dac743
SHA256

c4366458a92f326249dadb7d2e16d949117c323445bc2b667d85c2981acae110
SHA512

ee2f7605ae8b0869b3e18d1bec88d86442cb16f7ef61f4eaa0346d813416cbb916842bd2c906e69ff97f30f32dd3a2f73c44900962b8f8b1fd267e093c73e2a4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1584 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1584 AcroRd32.exe
1584 AcroRd32.exe
1584 AcroRd32.exe
1584 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Report - Catalyst Maturity Assessment insights for financial services and insurance.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1584

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1584-54-0x0000000075191000-0x0000000075193000-memory.dmp

Filesize
8KB

Download