0a3ea57ff184694e8568f97462add66cea904fcbac8b01afc6e92872c7019ded | Triage

Analysis

max time kernel
1204s
max time network
1221s
platform
windows7_x64
resource
win7-en-20211208
submitted
09-03-2022 20:56

Sharing

Report Analysis Logs

General

Target

Village of Stratford.pdf
Size

186KB
MD5

c3b6bd9b391284a6c7645b5af8d279c0
SHA1

73f7aca86a3bff817c4c367299b405f98e7efbd9
SHA256

0a3ea57ff184694e8568f97462add66cea904fcbac8b01afc6e92872c7019ded
SHA512

f8125e028447ce2f28883c3efb42410fb0af47f611e60f429e57f38c207806b58bfe601ebba8bfffae8cafe41d36aa9e97d231e6e9b3e93a739f06ee609fbf74

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

904 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

904 AcroRd32.exe
904 AcroRd32.exe
904 AcroRd32.exe
904 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Village of Stratford.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:904

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/904-55-0x00000000762C1000-0x00000000762C3000-memory.dmp

Filesize
8KB

Download