ec32ff0c049bd8812a35aeaaaae1f66eaf0ce8aefce535d142862ae89435c2e2 | Triage

Analysis

max time kernel
4294213s
max time network
131s
platform
windows7_x64
resource
win7-20220223-en
submitted
09-03-2022 13:25

Sharing

Report Analysis Logs

General

Target

ec32ff0c049bd8812a35aeaaaae1f66eaf0ce8aefce535d142862ae89435c2e2.pdf
Size

38KB
MD5

257813d292c494797a957f0992ba1405
SHA1

eb376b77cb6e2a6d89e3cc7368867c12bcc3317a
SHA256

ec32ff0c049bd8812a35aeaaaae1f66eaf0ce8aefce535d142862ae89435c2e2
SHA512

a3a3e5f7167613ed8f2f6ca141620a4bf8917e079f0985bc78466eabd81fe2afb3d4dd4dea256834a8c211bd9a073964b68e15ccc19628a62f95ea1c92149281

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1772 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1772 AcroRd32.exe
1772 AcroRd32.exe
1772 AcroRd32.exe
1772 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ec32ff0c049bd8812a35aeaaaae1f66eaf0ce8aefce535d142862ae89435c2e2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1772

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1772-54-0x0000000074BE1000-0x0000000074BE3000-memory.dmp

Filesize
8KB

Download