b76fdd77311cd953cfe9307ee78a02e5212e5a27bed63115c16c38a8044d45db | Triage

Resubmissions

07-03-2022 14:01

220307-rbv2taabdj 3

07-03-2022 13:56

220307-q8ynjafcd3 3

Analysis

max time kernel
4294181s
max time network
130s
platform
windows7_x64
resource
win7-20220223-en
submitted
07-03-2022 13:56

Sharing

Report Analysis Logs

General

Target

20005_718255_XXATSCSOA.pdf
Size

60KB
MD5

069b667f36658b120f8d574e60b649e5
SHA1

a040848214ba46ee4740f2853e154f41843a6c4b
SHA256

b76fdd77311cd953cfe9307ee78a02e5212e5a27bed63115c16c38a8044d45db
SHA512

bcd219a9166a4ee0948cdf497638a0d38fc20c8783b62b4ff04792193f4f9d85c1c7a6ac970215f6e00cb5d6fcf39dc3b3d19b58929116d686b8de8f2f703b04

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1780 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1780 AcroRd32.exe
1780 AcroRd32.exe
1780 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\20005_718255_XXATSCSOA.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1780

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1780-54-0x0000000076761000-0x0000000076763000-memory.dmp

Filesize
8KB

Download