936f67131ef72d448d6e3f2797b2682e7f0c10db801ba318f5f6610be7d7af23 | Triage

Analysis

max time kernel
4294211s
max time network
121s
platform
windows7_x64
resource
win7-20220311-en
submitted
11-03-2022 15:16

Sharing

Report Analysis Logs

General

Target

1d28ef8c22dddec0bdecd8a36f4d785139d8f939.pdf
Size

66KB
MD5

41cd59f0aac42b84a8b57a1bbeb8a195
SHA1

1d28ef8c22dddec0bdecd8a36f4d785139d8f939
SHA256

936f67131ef72d448d6e3f2797b2682e7f0c10db801ba318f5f6610be7d7af23
SHA512

6553fb30e75d779d66329681bd532c3a69fe671d2a6ac655aaa47debaff395229e9e0fd3a5f7c0b2b6eb49784438875fada58b0c0088b66942e6e4adc6e76d2f

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1808 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1808 AcroRd32.exe
1808 AcroRd32.exe
1808 AcroRd32.exe
1808 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1d28ef8c22dddec0bdecd8a36f4d785139d8f939.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1808

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1808-54-0x0000000075BB1000-0x0000000075BB3000-memory.dmp

Filesize
8KB

Download