97b48f4fd6ac3dd91175ca1e40fdf764add99eb2c0f0cff375874a807c4f9005 | Triage

Analysis

max time kernel
158s
max time network
126s
platform
windows7_x64
resource
win7-en-20211208
submitted
09-03-2022 12:13

Sharing

Report Analysis Logs

General

Target

97b48f4fd6ac3dd91175ca1e40fdf764add99eb2c0f0cff375874a807c4f9005.pdf
Size

298KB
MD5

f2d8f1770dc64f374170bfe39b46cde7
SHA1

e47160699535139b38c2d92de3f0276a4b234286
SHA256

97b48f4fd6ac3dd91175ca1e40fdf764add99eb2c0f0cff375874a807c4f9005
SHA512

72fcc61630aff55616ee750e69d465949645aa7b0afa176db7eccd55be23add9d77e80c0e14743f0bf1914de32bb3009d2776aa8ca69f3e8f49ad12ff430cce3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

812 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

812 AcroRd32.exe
812 AcroRd32.exe
812 AcroRd32.exe
812 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\97b48f4fd6ac3dd91175ca1e40fdf764add99eb2c0f0cff375874a807c4f9005.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:812

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/812-55-0x0000000076071000-0x0000000076073000-memory.dmp

Filesize
8KB

Download