3468b344f343fe7fcebeab1a746867e493e063d094755d7e7610998268be4c3d | Triage

Analysis

max time kernel
4294178s
max time network
120s
platform
windows7_x64
resource
win7-20220223-en
submitted
05-03-2022 20:16

Sharing

Report Analysis Logs

General

Target

MICROSOFT AWARD LOTTERY 2022.pdf
Size

60KB
MD5

3505bf58ece1a2c4d5eb3efc740dfc97
SHA1

6f74123d885497493d4c972513164b32fe0f143b
SHA256

6d9ffce806485828dc3020bed676efbf511940c5d772f8f5de8704b40612a467
SHA512

75d92c58652b7ee40f15d8a0236b951197892f6fa6f2c837c7b91656523167127f471c8d6bf6c556290ec91516f9448204445bdcb322902e57dd11c10a9fb089

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1160 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1160 AcroRd32.exe
1160 AcroRd32.exe
1160 AcroRd32.exe
1160 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MICROSOFT AWARD LOTTERY 2022.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1160

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1160-54-0x00000000752A1000-0x00000000752A3000-memory.dmp

Filesize
8KB

Download