912442eb362578cf64f76d93ffbddcb9293c5555448e0c821b92456eacc6811c | Triage

Analysis

max time kernel
4294211s
max time network
124s
platform
windows7_x64
resource
win7-20220223-en
submitted
11-03-2022 02:00

Sharing

Report Analysis Logs

General

Target

DTO 110322.pdf
Size

278KB
MD5

8e1f49e160108ad6e6a7696f1611a5ed
SHA1

28624f2c9bed8c16a76568d3b8b64e8eb387b775
SHA256

912442eb362578cf64f76d93ffbddcb9293c5555448e0c821b92456eacc6811c
SHA512

40b2c926de12c7eef276b8b45bd47c97515e0ddb158f218f46058aab8197a6d6f38001866cc7c5dce44d6f052810e9992ca12f416130852893cd00aeac528ec8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1128 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1128 AcroRd32.exe
1128 AcroRd32.exe
1128 AcroRd32.exe
1128 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DTO 110322.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1128

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1128-54-0x0000000075281000-0x0000000075283000-memory.dmp

Filesize
8KB

Download