014735f64502303eb217df392e897b1308133ef97c2b65ec5ebe52fc6692e6ab | Triage

Analysis

max time kernel
4294211s
max time network
127s
platform
windows7_x64
resource
win7-20220223-en
submitted
09-03-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 090322.pdf
Size

272KB
MD5

338acdd4022c1b6998ff98b6026ec436
SHA1

a202979e05b350144678d4f664bcba0e9d2f06cc
SHA256

014735f64502303eb217df392e897b1308133ef97c2b65ec5ebe52fc6692e6ab
SHA512

0195561a6d88231506b0f2571965d28ff3c6bb39ad6ee99d4cb3c4050d25522994820a7e8bc6d3811aa2ee3a2f44e2f67071993a860d392a30dc124806e3b3d3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1808 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1808 AcroRd32.exe
1808 AcroRd32.exe
1808 AcroRd32.exe
1808 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 090322.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1808

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1808-54-0x0000000075CC1000-0x0000000075CC3000-memory.dmp

Filesize
8KB

Download