290b2b1428074d556655099a94d8927c012fc1eec177c6d0526060ab62bb2bc9 | Triage

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-en-20211208
submitted
04-03-2022 05:42

Sharing

Report Analysis Logs

General

Target

[CV-3] JNT Connect_EN-KO-EN_Law.pdf
Size

358KB
MD5

b7d3343cb4886594bc2d3c7ca71b526b
SHA1

eacf59106b03c3d90c57fdab088d02817d0f2474
SHA256

290b2b1428074d556655099a94d8927c012fc1eec177c6d0526060ab62bb2bc9
SHA512

c471a4057917c9a300a1a53147bf3131c3ec048637d600001d2fd6971712b72750bd392b80e24bde52c9ad8d202a0ffd1563b767379c2802aec022c7c59d3ef2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1612 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1612 AcroRd32.exe
1612 AcroRd32.exe
1612 AcroRd32.exe
1612 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\[CV-3] JNT Connect_EN-KO-EN_Law.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1612

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1612-55-0x0000000075AC1000-0x0000000075AC3000-memory.dmp

Filesize
8KB

Download