4fb94966f6e243bce8db8aae07dfc9e63dcf258113a1e8799ba6cac3dccd92f2 | Triage

Analysis

max time kernel
4294210s
max time network
122s
platform
windows7_x64
resource
win7-20220311-en
submitted
11-03-2022 15:19

Sharing

Report Analysis Logs

General

Target

4fb94966f6e243bce8db8aae07dfc9e63dcf258113a1e8799ba6cac3dccd92f2.pdf
Size

67KB
MD5

a06ae2fc2f92df7254187cae0df6dd09
SHA1

2f045806833ada528e31f99cf9355f7ead50bd29
SHA256

4fb94966f6e243bce8db8aae07dfc9e63dcf258113a1e8799ba6cac3dccd92f2
SHA512

ac0abb8f0133d7807e8ded84258545c47c93b820fe6bc42e44ae35a1e9556b87c091cfeeffaad66626c3aca0def81666f3a701a1610871c12e8dbfca847adb74

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1568 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1568 AcroRd32.exe
1568 AcroRd32.exe
1568 AcroRd32.exe
1568 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4fb94966f6e243bce8db8aae07dfc9e63dcf258113a1e8799ba6cac3dccd92f2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1568

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1568-54-0x0000000076851000-0x0000000076853000-memory.dmp

Filesize
8KB

Download