4c059ac22437b2a8591bffa10d67807c2d78c327d9501701aaef185a306c269d | Triage

Analysis

max time kernel
4294182s
max time network
131s
platform
windows7_x64
resource
win7-20220223-en
submitted
10-03-2022 20:36

Sharing

Report Analysis Logs

General

Target

4c059ac22437b2a8591bffa10d67807c2d78c327d9501701aaef185a306c269d.pdf
Size

44KB
MD5

02b1a9d3e05ccc1a82a1b6522fe5b104
SHA1

a184fd5b300e1ab6bc44cb1bdccf01248f131107
SHA256

4c059ac22437b2a8591bffa10d67807c2d78c327d9501701aaef185a306c269d
SHA512

d0dc1c3e8606ad78dfceb20de3663830e73e093bef06d5d04855341189a5d5afd0378bd65a29626ddd66bb6cf1395902b78f4fbc3576fa6d662ba62becc29a90

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1236 AcroRd32.exe
Suspicious use of SetWindowsHookEx 5 IoCs

Processes:

AcroRd32.exe

pid process

1236 AcroRd32.exe
1236 AcroRd32.exe
1236 AcroRd32.exe
1236 AcroRd32.exe
1236 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c059ac22437b2a8591bffa10d67807c2d78c327d9501701aaef185a306c269d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1236-54-0x0000000075F71000-0x0000000075F73000-memory.dmp

Filesize
8KB

Download