285386157f8dd9c1921dd010c81394b6bbe9ab91814b8d7d41bc572317d09783 | Triage

Analysis

max time kernel
150s
max time network
119s
platform
windows7_x64
resource
win7-en-20211208
submitted
04-03-2022 07:06

Sharing

Report Analysis Logs

General

Target

FV_FAKTURA_CESKA_2220325.pdf
Size

141KB
MD5

95414eb9b591a130f931471a27755583
SHA1

7749aa2caa209aa937625ccf7d817b0e126eeb21
SHA256

285386157f8dd9c1921dd010c81394b6bbe9ab91814b8d7d41bc572317d09783
SHA512

e93042af5c128c87dcc4fe67590cb2412d540ec67ec4297e8d541e5f7a501c43b129d145d74645783c397b817e39bf2246dda8fd76c5154d364cdba2cbd43530

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe
1616 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\FV_FAKTURA_CESKA_2220325.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1616

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-55-0x0000000075AB1000-0x0000000075AB3000-memory.dmp

Filesize
8KB

Download